General
-
Target
4519ffb96ab3e8a4746518455911475f459685fc4174251a17552f1f100c93b5
-
Size
5.9MB
-
Sample
241106-3hw38szgrd
-
MD5
5ce6dc42328ec1134eb1af7ceb781608
-
SHA1
8c62c89a91b5372530617d5135aa7e3a08374a21
-
SHA256
4519ffb96ab3e8a4746518455911475f459685fc4174251a17552f1f100c93b5
-
SHA512
4d0a63bd1221f1abba3456e2620d1bf8b60e17909d106fa1413d2bbf764fc643733006e84e3536d9459539f55794ba0eabd6d1cc46a657e3c96cdbbd7e670e78
-
SSDEEP
98304:4ZRChvOv4yzF7CW7NEwaT3/fKg2LCvkU2fxr4ZsbAqzJao8PmXKQZUX2L9JTg:0Cs35JEwaj/12OsU2fB+hqkxP6KIUGLA
Static task
static1
Behavioral task
behavioral1
Sample
4519ffb96ab3e8a4746518455911475f459685fc4174251a17552f1f100c93b5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4519ffb96ab3e8a4746518455911475f459685fc4174251a17552f1f100c93b5.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
4519ffb96ab3e8a4746518455911475f459685fc4174251a17552f1f100c93b5
-
Size
5.9MB
-
MD5
5ce6dc42328ec1134eb1af7ceb781608
-
SHA1
8c62c89a91b5372530617d5135aa7e3a08374a21
-
SHA256
4519ffb96ab3e8a4746518455911475f459685fc4174251a17552f1f100c93b5
-
SHA512
4d0a63bd1221f1abba3456e2620d1bf8b60e17909d106fa1413d2bbf764fc643733006e84e3536d9459539f55794ba0eabd6d1cc46a657e3c96cdbbd7e670e78
-
SSDEEP
98304:4ZRChvOv4yzF7CW7NEwaT3/fKg2LCvkU2fxr4ZsbAqzJao8PmXKQZUX2L9JTg:0Cs35JEwaj/12OsU2fB+hqkxP6KIUGLA
Score10/10-
Detect Socks5Systemz Payload
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-