General
-
Target
af503d0b9b166ef84a29051153ce9e24c36e0466928d47b0a9fec26e9bec3a19
-
Size
4.9MB
-
Sample
240620-22bqza1hlh
-
MD5
8169c9f2327f1cf2e695ef76f349a715
-
SHA1
89c1306d77f525bf18e96e7734ed722242dbb579
-
SHA256
af503d0b9b166ef84a29051153ce9e24c36e0466928d47b0a9fec26e9bec3a19
-
SHA512
a82cbef9ab2e61048cfee6b89a655a27295fe431406873785948566f1fcbaf43adc5105fe2edbe0fd303271ac3c31cb5a3e05d1cebaa008bd4af51b5e214a8c1
-
SSDEEP
98304:mg721aYMPMJIcGcR3F7xAJhu6uGJFhAkCwea9/E4J3z9kIq+uGnFnnXlcBll:a1aCOcGsv0PueFmBwW4JDlnFnXlcBll
Static task
static1
Behavioral task
behavioral1
Sample
af503d0b9b166ef84a29051153ce9e24c36e0466928d47b0a9fec26e9bec3a19.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
af503d0b9b166ef84a29051153ce9e24c36e0466928d47b0a9fec26e9bec3a19.exe
Resource
win10-20240404-en
Malware Config
Extracted
socks5systemz
dtetdqv.info
http://dtetdqv.info/search/?q=67e28dd86f5ff42d4509ac187c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa4de8889b5e4fa9281ae978f771ea771795af8e05c645db22f31df92d8b38e316a667d307eca743ec4c2b07b52966923a6f87fd15c7ed9c
bwzgkuy.com
http://bwzgkuy.com/search/?q=67e28dd86809f27b415ba51b7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa1de8889b5e4fa9281ae978a771ea771795af8e05c645db22f31dfe339426fa11a366c350adb719a9577e55b8603e983a608ff718c2eb929b33
Targets
-
-
Target
af503d0b9b166ef84a29051153ce9e24c36e0466928d47b0a9fec26e9bec3a19
-
Size
4.9MB
-
MD5
8169c9f2327f1cf2e695ef76f349a715
-
SHA1
89c1306d77f525bf18e96e7734ed722242dbb579
-
SHA256
af503d0b9b166ef84a29051153ce9e24c36e0466928d47b0a9fec26e9bec3a19
-
SHA512
a82cbef9ab2e61048cfee6b89a655a27295fe431406873785948566f1fcbaf43adc5105fe2edbe0fd303271ac3c31cb5a3e05d1cebaa008bd4af51b5e214a8c1
-
SSDEEP
98304:mg721aYMPMJIcGcR3F7xAJhu6uGJFhAkCwea9/E4J3z9kIq+uGnFnnXlcBll:a1aCOcGsv0PueFmBwW4JDlnFnXlcBll
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-