General
-
Target
36cfc56b6edfdaf9d62949b676bf07f044386d3fb3af8373cff0b5cf344bf421
-
Size
5.4MB
-
Sample
241104-lt8sqsyfjr
-
MD5
38656579af20ac7c8f1353cca3e79fff
-
SHA1
37446c312da9a12cc91a858c2abd8a97b4cb65d7
-
SHA256
36cfc56b6edfdaf9d62949b676bf07f044386d3fb3af8373cff0b5cf344bf421
-
SHA512
91fb563bd566add63a223decbe26657d557c39688f0d4804bc0bfd41088ad7e8395808a222de7a095d450be1e0a3c288b68b9a2b2d8f17f4172379598a109091
-
SSDEEP
98304:QyhS3xxuvWIiuXc9HMDXyDo5My6mrmLlPG5dp0EkfYF0WM/ATH07oxvOXND:XhExwWIicc8yD87rmLlPGjWEkfYFmArC
Static task
static1
Behavioral task
behavioral1
Sample
36cfc56b6edfdaf9d62949b676bf07f044386d3fb3af8373cff0b5cf344bf421.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36cfc56b6edfdaf9d62949b676bf07f044386d3fb3af8373cff0b5cf344bf421.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
36cfc56b6edfdaf9d62949b676bf07f044386d3fb3af8373cff0b5cf344bf421
-
Size
5.4MB
-
MD5
38656579af20ac7c8f1353cca3e79fff
-
SHA1
37446c312da9a12cc91a858c2abd8a97b4cb65d7
-
SHA256
36cfc56b6edfdaf9d62949b676bf07f044386d3fb3af8373cff0b5cf344bf421
-
SHA512
91fb563bd566add63a223decbe26657d557c39688f0d4804bc0bfd41088ad7e8395808a222de7a095d450be1e0a3c288b68b9a2b2d8f17f4172379598a109091
-
SSDEEP
98304:QyhS3xxuvWIiuXc9HMDXyDo5My6mrmLlPG5dp0EkfYF0WM/ATH07oxvOXND:XhExwWIicc8yD87rmLlPGjWEkfYFmArC
Score10/10-
Detect Socks5Systemz Payload
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-