General
-
Target
d96d7ae5e93efe6583a6cf73eacb8c93bd2e0177169b438725d47b9d913f5052
-
Size
5.4MB
-
Sample
240630-ra484ayflh
-
MD5
2d4235d6cd655469d5cb64aa8a80418f
-
SHA1
24760b73ff225bc9b3e4b8255e4c36847018983d
-
SHA256
d96d7ae5e93efe6583a6cf73eacb8c93bd2e0177169b438725d47b9d913f5052
-
SHA512
b778eb80e24825d6697b417bf5a00c7115f82b03477bd59f78b6afb4f6252daf6441e9b15e76cdd8aa4731ebed80d9cca46288d6c1aca738632068c91468d156
-
SSDEEP
98304:CgthK0SefFKkmLqy+LbNkxcbWGUBxlC23DfSoj3qexz/jmyTVPhvVHF6Ei857/Qx:JtcefFKkRy+HYcbWpxvTfzjR/rhv5MEu
Static task
static1
Behavioral task
behavioral1
Sample
d96d7ae5e93efe6583a6cf73eacb8c93bd2e0177169b438725d47b9d913f5052.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
d96d7ae5e93efe6583a6cf73eacb8c93bd2e0177169b438725d47b9d913f5052.exe
Resource
win11-20240611-en
Malware Config
Targets
-
-
Target
d96d7ae5e93efe6583a6cf73eacb8c93bd2e0177169b438725d47b9d913f5052
-
Size
5.4MB
-
MD5
2d4235d6cd655469d5cb64aa8a80418f
-
SHA1
24760b73ff225bc9b3e4b8255e4c36847018983d
-
SHA256
d96d7ae5e93efe6583a6cf73eacb8c93bd2e0177169b438725d47b9d913f5052
-
SHA512
b778eb80e24825d6697b417bf5a00c7115f82b03477bd59f78b6afb4f6252daf6441e9b15e76cdd8aa4731ebed80d9cca46288d6c1aca738632068c91468d156
-
SSDEEP
98304:CgthK0SefFKkmLqy+LbNkxcbWGUBxlC23DfSoj3qexz/jmyTVPhvVHF6Ei857/Qx:JtcefFKkRy+HYcbWpxvTfzjR/rhv5MEu
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-