General
-
Target
f87c77c54e631e106d48c74704aff875525a7fb54be4047e95867f353d19dd10
-
Size
4.6MB
-
Sample
241112-dlpe5atdpf
-
MD5
88aeff724b4532859537fb5c00053954
-
SHA1
4b8668af63cd530b13ad53c2035a9ea4f3f06699
-
SHA256
f87c77c54e631e106d48c74704aff875525a7fb54be4047e95867f353d19dd10
-
SHA512
a53a150b6ee9893e8edb302a6bf621cee965dd7d88bf0fda795e904bb0fca59b23e170e603b8db704e6d2ccb90e5efd612ba4785c6dbb3ddf7c3a7c3b48c4574
-
SSDEEP
98304:45UXWTCxpneSTkJRbB5tYitGjI1+60cjiBKiNB+/H0BqvJmHIg0NsWL:CUXCCxPTA1Bw2GjI1sBKuB+/UcvJmHIH
Static task
static1
Behavioral task
behavioral1
Sample
f87c77c54e631e106d48c74704aff875525a7fb54be4047e95867f353d19dd10.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f87c77c54e631e106d48c74704aff875525a7fb54be4047e95867f353d19dd10.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
f87c77c54e631e106d48c74704aff875525a7fb54be4047e95867f353d19dd10
-
Size
4.6MB
-
MD5
88aeff724b4532859537fb5c00053954
-
SHA1
4b8668af63cd530b13ad53c2035a9ea4f3f06699
-
SHA256
f87c77c54e631e106d48c74704aff875525a7fb54be4047e95867f353d19dd10
-
SHA512
a53a150b6ee9893e8edb302a6bf621cee965dd7d88bf0fda795e904bb0fca59b23e170e603b8db704e6d2ccb90e5efd612ba4785c6dbb3ddf7c3a7c3b48c4574
-
SSDEEP
98304:45UXWTCxpneSTkJRbB5tYitGjI1+60cjiBKiNB+/H0BqvJmHIg0NsWL:CUXCCxPTA1Bw2GjI1sBKuB+/UcvJmHIH
Score10/10-
Detect Socks5Systemz Payload
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-