General
-
Target
6f804a4dea4dde1d097f28db0f0b3b4ac1b883b0110866f6661c228b647306bc
-
Size
3.9MB
-
Sample
240811-ratglasemn
-
MD5
690fae623efdfc5fe8600da2db11032e
-
SHA1
dd3774c44b3aaa6fe63fcd11b6adb1a00d20a3fc
-
SHA256
6f804a4dea4dde1d097f28db0f0b3b4ac1b883b0110866f6661c228b647306bc
-
SHA512
47828aebcc69178c3972812f5ced40c2658ae68d08e7db22b7ce8f78d104a7153cdfe38761fe29008fe02ed8b4f22cddaebcf9360f459b183a478dfd23a855b3
-
SSDEEP
98304:NbvL6OJzqJTZ5sGYcCbq44XbLHwQInR+4QUe9tuj8nTkxvEdh:FL6YqdsLKLUQInRC9tujgy8L
Static task
static1
Behavioral task
behavioral1
Sample
6f804a4dea4dde1d097f28db0f0b3b4ac1b883b0110866f6661c228b647306bc.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
6f804a4dea4dde1d097f28db0f0b3b4ac1b883b0110866f6661c228b647306bc.exe
Resource
win11-20240802-en
Malware Config
Targets
-
-
Target
6f804a4dea4dde1d097f28db0f0b3b4ac1b883b0110866f6661c228b647306bc
-
Size
3.9MB
-
MD5
690fae623efdfc5fe8600da2db11032e
-
SHA1
dd3774c44b3aaa6fe63fcd11b6adb1a00d20a3fc
-
SHA256
6f804a4dea4dde1d097f28db0f0b3b4ac1b883b0110866f6661c228b647306bc
-
SHA512
47828aebcc69178c3972812f5ced40c2658ae68d08e7db22b7ce8f78d104a7153cdfe38761fe29008fe02ed8b4f22cddaebcf9360f459b183a478dfd23a855b3
-
SSDEEP
98304:NbvL6OJzqJTZ5sGYcCbq44XbLHwQInR+4QUe9tuj8nTkxvEdh:FL6YqdsLKLUQInRC9tujgy8L
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-