General
-
Target
d19054be42ebd099de840299f4d2443209bdd443d766328fa3dc97741d8b65e6
-
Size
4.5MB
-
Sample
240624-gh63jsyemd
-
MD5
665d73ce4eb80c0fbe702cbb018da9d0
-
SHA1
ff9d4544d67b7d0f36f97af5166b07a9e9bb4eef
-
SHA256
d19054be42ebd099de840299f4d2443209bdd443d766328fa3dc97741d8b65e6
-
SHA512
76d475c4b173eeed1944da34675ec61a7c3eb867dd5e511acb351fd42fec56988718059461f0f60c4bc407c033600029b753db71ee5255ae42e31267b9e5d776
-
SSDEEP
98304:mFUa4TpZb9AQTaA66SChkTpKWWxQ+s8j0J71yYTDVIG2X9pWBODhu+zmTt01:X/umBzoKbrj0N1yYTSX94wDhuA/
Static task
static1
Behavioral task
behavioral1
Sample
d19054be42ebd099de840299f4d2443209bdd443d766328fa3dc97741d8b65e6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d19054be42ebd099de840299f4d2443209bdd443d766328fa3dc97741d8b65e6.exe
Resource
win10-20240404-en
Malware Config
Extracted
socks5systemz
bwsdtgw.com
http://bwsdtgw.com/search/?q=67e28dd8690cfb204406a51a7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa49e8889b5e4fa9281ae978fe71ea771795af8e05c645db22f31df92d8b38e316a667d307eca743ec4c2b07b52966923a6e8cff19c2ec95
bbuyhdy.com
http://bbuyhdy.com/search/?q=67e28dd8655bf57a4609f84c7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa48e8889b5e4fa9281ae978ff71ea771795af8e05c645db22f31dfe339426fa11a366c350adb719a9577e55b8603e983a608ff613c0e7979939
Targets
-
-
Target
d19054be42ebd099de840299f4d2443209bdd443d766328fa3dc97741d8b65e6
-
Size
4.5MB
-
MD5
665d73ce4eb80c0fbe702cbb018da9d0
-
SHA1
ff9d4544d67b7d0f36f97af5166b07a9e9bb4eef
-
SHA256
d19054be42ebd099de840299f4d2443209bdd443d766328fa3dc97741d8b65e6
-
SHA512
76d475c4b173eeed1944da34675ec61a7c3eb867dd5e511acb351fd42fec56988718059461f0f60c4bc407c033600029b753db71ee5255ae42e31267b9e5d776
-
SSDEEP
98304:mFUa4TpZb9AQTaA66SChkTpKWWxQ+s8j0J71yYTDVIG2X9pWBODhu+zmTt01:X/umBzoKbrj0N1yYTSX94wDhuA/
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-