General
-
Target
b2ad1c4f18316b8d6bfb921d2e0b011fd9f9dd1da7161b39b9f83f5256e13f30
-
Size
5.9MB
-
Sample
241106-w213zavfpf
-
MD5
aff2ec3e028db6126b8e1a35a7ac67a7
-
SHA1
4bb1e806abdfac214ea8d1b2e114c84df3373552
-
SHA256
b2ad1c4f18316b8d6bfb921d2e0b011fd9f9dd1da7161b39b9f83f5256e13f30
-
SHA512
83367d54815920b3c627f6bc0877224cfc06a58337f0fb8b23b3a6a92a3cd7286c6596ca199777289b36c2a95b76156b26750eb9de21cef14cf2bd372d8d8468
-
SSDEEP
98304:4Ab25ysxpLTi9B9SQbixHMbggnkpfWeGfYi7jKMQIf8fiMr+krBSIc3lmcH:oAB9SQbixHMbTkpfWBwJMQoGie+krBSF
Static task
static1
Behavioral task
behavioral1
Sample
b2ad1c4f18316b8d6bfb921d2e0b011fd9f9dd1da7161b39b9f83f5256e13f30.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b2ad1c4f18316b8d6bfb921d2e0b011fd9f9dd1da7161b39b9f83f5256e13f30.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
b2ad1c4f18316b8d6bfb921d2e0b011fd9f9dd1da7161b39b9f83f5256e13f30
-
Size
5.9MB
-
MD5
aff2ec3e028db6126b8e1a35a7ac67a7
-
SHA1
4bb1e806abdfac214ea8d1b2e114c84df3373552
-
SHA256
b2ad1c4f18316b8d6bfb921d2e0b011fd9f9dd1da7161b39b9f83f5256e13f30
-
SHA512
83367d54815920b3c627f6bc0877224cfc06a58337f0fb8b23b3a6a92a3cd7286c6596ca199777289b36c2a95b76156b26750eb9de21cef14cf2bd372d8d8468
-
SSDEEP
98304:4Ab25ysxpLTi9B9SQbixHMbggnkpfWeGfYi7jKMQIf8fiMr+krBSIc3lmcH:oAB9SQbixHMbTkpfWBwJMQoGie+krBSF
Score10/10-
Detect Socks5Systemz Payload
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-