General
-
Target
0ab1fd18d6755123a1dcf8bfd2d9dce5e1ba76b6f228f1ce2af90f760095798d
-
Size
4.0MB
-
Sample
240726-w4232swgnm
-
MD5
eddf9f53b95e0e3169a6a4075e23f56b
-
SHA1
4d7ab1ac162bd69a0af80d03529a330ea2a543b2
-
SHA256
0ab1fd18d6755123a1dcf8bfd2d9dce5e1ba76b6f228f1ce2af90f760095798d
-
SHA512
748c9bb56a6e6e29de854f0f9b97535fd410fd067f80160f00c0286512acce4c8dade8f325bf99872499c8f0698412b7ca62f094595693e3471460acb0d0fcbd
-
SSDEEP
98304:NAF4n2dG0+UCXEQzbyTKyvLoAQql9/LmvUtvXoKnjkdI:WbGJjXE5oAQql9CvUtvXPjkS
Static task
static1
Behavioral task
behavioral1
Sample
0ab1fd18d6755123a1dcf8bfd2d9dce5e1ba76b6f228f1ce2af90f760095798d.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
0ab1fd18d6755123a1dcf8bfd2d9dce5e1ba76b6f228f1ce2af90f760095798d.exe
Resource
win11-20240709-en
Malware Config
Targets
-
-
Target
0ab1fd18d6755123a1dcf8bfd2d9dce5e1ba76b6f228f1ce2af90f760095798d
-
Size
4.0MB
-
MD5
eddf9f53b95e0e3169a6a4075e23f56b
-
SHA1
4d7ab1ac162bd69a0af80d03529a330ea2a543b2
-
SHA256
0ab1fd18d6755123a1dcf8bfd2d9dce5e1ba76b6f228f1ce2af90f760095798d
-
SHA512
748c9bb56a6e6e29de854f0f9b97535fd410fd067f80160f00c0286512acce4c8dade8f325bf99872499c8f0698412b7ca62f094595693e3471460acb0d0fcbd
-
SSDEEP
98304:NAF4n2dG0+UCXEQzbyTKyvLoAQql9/LmvUtvXoKnjkdI:WbGJjXE5oAQql9CvUtvXPjkS
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-