General
-
Target
6339968e387182ce990ade5c97f99c95fdab312c8e775a25dc07272f0f3e1e9e
-
Size
5.5MB
-
Sample
241102-jvwtfs1enk
-
MD5
195f9c2efc0d02823e2f0c1ec18c9dc9
-
SHA1
627eb7bcc450c874b64614f5eed660a7b21ab22a
-
SHA256
6339968e387182ce990ade5c97f99c95fdab312c8e775a25dc07272f0f3e1e9e
-
SHA512
c36799769ed47703259d342932b3d64703c3c97b6eeee1ffb6065ef99b3bff57d4c24665023d81a99026137a1aecd86839f7c2d8e59d6427a0c14af2c61d27f6
-
SSDEEP
98304:CBqdSiNuyEgVmE1judYMBT1ANoFed6XCU3yXGh82XpHsydBQoKwQeyQxf:e6xBkdYMnOo4mCUCXGhPMydioKBZQl
Static task
static1
Behavioral task
behavioral1
Sample
6339968e387182ce990ade5c97f99c95fdab312c8e775a25dc07272f0f3e1e9e.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
6339968e387182ce990ade5c97f99c95fdab312c8e775a25dc07272f0f3e1e9e.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
6339968e387182ce990ade5c97f99c95fdab312c8e775a25dc07272f0f3e1e9e
-
Size
5.5MB
-
MD5
195f9c2efc0d02823e2f0c1ec18c9dc9
-
SHA1
627eb7bcc450c874b64614f5eed660a7b21ab22a
-
SHA256
6339968e387182ce990ade5c97f99c95fdab312c8e775a25dc07272f0f3e1e9e
-
SHA512
c36799769ed47703259d342932b3d64703c3c97b6eeee1ffb6065ef99b3bff57d4c24665023d81a99026137a1aecd86839f7c2d8e59d6427a0c14af2c61d27f6
-
SSDEEP
98304:CBqdSiNuyEgVmE1judYMBT1ANoFed6XCU3yXGh82XpHsydBQoKwQeyQxf:e6xBkdYMnOo4mCUCXGhPMydioKBZQl
Score10/10-
Detect Socks5Systemz Payload
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-