General
-
Target
13c197d8ad83f087147875a1dd8d39bf821df737f1e4de228a58f68a2e2129d8
-
Size
5.9MB
-
Sample
241111-q2shyaypgw
-
MD5
65d102b8a2838b68d5752c0acc180643
-
SHA1
0b3bc97798d580c65d0ad4f80ad9a38884050fcc
-
SHA256
13c197d8ad83f087147875a1dd8d39bf821df737f1e4de228a58f68a2e2129d8
-
SHA512
913899141175cb2291447720e6c2b4a5773e25a1d3c7588a9cacec98328fadb4f24ca260794b65d7393c12ad1b92db88be2740678253ab9da948a4e64226641c
-
SSDEEP
98304:4nYsFHTU0xFa9fZXoPD4IpJjktn+sqSKLKvB1OPnDMAymAOhC6EGPYZgHn1Ag:LER09JWB6n+HUvB1yDMnj6EGgO
Static task
static1
Behavioral task
behavioral1
Sample
13c197d8ad83f087147875a1dd8d39bf821df737f1e4de228a58f68a2e2129d8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13c197d8ad83f087147875a1dd8d39bf821df737f1e4de228a58f68a2e2129d8.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
13c197d8ad83f087147875a1dd8d39bf821df737f1e4de228a58f68a2e2129d8
-
Size
5.9MB
-
MD5
65d102b8a2838b68d5752c0acc180643
-
SHA1
0b3bc97798d580c65d0ad4f80ad9a38884050fcc
-
SHA256
13c197d8ad83f087147875a1dd8d39bf821df737f1e4de228a58f68a2e2129d8
-
SHA512
913899141175cb2291447720e6c2b4a5773e25a1d3c7588a9cacec98328fadb4f24ca260794b65d7393c12ad1b92db88be2740678253ab9da948a4e64226641c
-
SSDEEP
98304:4nYsFHTU0xFa9fZXoPD4IpJjktn+sqSKLKvB1OPnDMAymAOhC6EGPYZgHn1Ag:LER09JWB6n+HUvB1yDMnj6EGgO
Score10/10-
Detect Socks5Systemz Payload
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-