General
-
Target
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
Size
5.8MB
-
Sample
240620-3gb2nswgrn
-
MD5
20a18da1285d9a2224fc6335f821b7c7
-
SHA1
598ca4556823ee5c5d260a07a8f15bc1b3e9b6bb
-
SHA256
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
SHA512
1dbf9051b52ddf72f055e2bfe89c7d61fb24e8e16baf85099f1d0f68e81d217885ab8be6b8ad5465f9913b44b440275eab596ad28f4049de8b260e6fcacf04d7
-
SSDEEP
98304:mJ3Xq9jXW5Sv2Zw1zWmJ2rql9gpuXzi2KcfTX8Q/Pl5LxGI6bqiOdyTvvTyC:83Xq12ZQmrqlOMXm2KcrXlHl5LgIoqiD
Static task
static1
Behavioral task
behavioral1
Sample
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d.exe
Resource
win10-20240404-en
Malware Config
Extracted
socks5systemz
bfctprj.com
http://bfctprj.com/search/?q=67e28dd86f54a728120ffa1d7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa4ce8889b5e4fa9281ae978f771ea771795af8e05c645db22f31df92d8b38e316a667d307eca743ec4c2b07b52966923a6f87fd17c1e79c
bwafpwn.com
http://bwafpwn.com/search/?q=67e28dd8645fa72f495daa1c7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa4de8889b5e4fa9281ae978a771ea771795af8e05c645db22f31dfe339426fa11a366c350adb719a9577e55b8603e983a608ff718c2e994923c
Targets
-
-
Target
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
Size
5.8MB
-
MD5
20a18da1285d9a2224fc6335f821b7c7
-
SHA1
598ca4556823ee5c5d260a07a8f15bc1b3e9b6bb
-
SHA256
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
SHA512
1dbf9051b52ddf72f055e2bfe89c7d61fb24e8e16baf85099f1d0f68e81d217885ab8be6b8ad5465f9913b44b440275eab596ad28f4049de8b260e6fcacf04d7
-
SSDEEP
98304:mJ3Xq9jXW5Sv2Zw1zWmJ2rql9gpuXzi2KcfTX8Q/Pl5LxGI6bqiOdyTvvTyC:83Xq12ZQmrqlOMXm2KcrXlHl5LgIoqiD
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-