General
-
Target
3a9ac13cb6255e6c8e46096de49681d9c82a35e5128ae22b6dcfd6366f7315b4
-
Size
4.9MB
-
Sample
240629-h6datawepq
-
MD5
dfb176122ad4f536187cb8ce0ad60ad3
-
SHA1
5b2d9e9f8aaf507cacc66eaadab7adb9343052aa
-
SHA256
3a9ac13cb6255e6c8e46096de49681d9c82a35e5128ae22b6dcfd6366f7315b4
-
SHA512
b341728feac15b6941c387b1f8b3ff3e9fccb580727a128f0f910d10ed0a8c508c3cad8dbbbb299d5591987ebabaf888b26a4a5fcecdab7c49b52a568fa0a177
-
SSDEEP
98304:CiL1eZyaXe3fxNWMg1RcKRXCwQZ/7CEm6SUpSUUMHFOF7W4h2bcC1Qxr:h1QX4DhgHcKEZjeoSw0ytbpQB
Static task
static1
Behavioral task
behavioral1
Sample
3a9ac13cb6255e6c8e46096de49681d9c82a35e5128ae22b6dcfd6366f7315b4.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
3a9ac13cb6255e6c8e46096de49681d9c82a35e5128ae22b6dcfd6366f7315b4.exe
Resource
win11-20240611-en
Malware Config
Targets
-
-
Target
3a9ac13cb6255e6c8e46096de49681d9c82a35e5128ae22b6dcfd6366f7315b4
-
Size
4.9MB
-
MD5
dfb176122ad4f536187cb8ce0ad60ad3
-
SHA1
5b2d9e9f8aaf507cacc66eaadab7adb9343052aa
-
SHA256
3a9ac13cb6255e6c8e46096de49681d9c82a35e5128ae22b6dcfd6366f7315b4
-
SHA512
b341728feac15b6941c387b1f8b3ff3e9fccb580727a128f0f910d10ed0a8c508c3cad8dbbbb299d5591987ebabaf888b26a4a5fcecdab7c49b52a568fa0a177
-
SSDEEP
98304:CiL1eZyaXe3fxNWMg1RcKRXCwQZ/7CEm6SUpSUUMHFOF7W4h2bcC1Qxr:h1QX4DhgHcKEZjeoSw0ytbpQB
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-