General
-
Target
8f7b2a199d426794fae203604a10575f7b331a0c0ed102bad7b90a5fc875a339
-
Size
5.2MB
-
Sample
240702-jkdvwswfrq
-
MD5
ce302e55b334b531abcf30d405b6a33a
-
SHA1
8653ca960e8a89483faecf885ac252c402b71cf6
-
SHA256
8f7b2a199d426794fae203604a10575f7b331a0c0ed102bad7b90a5fc875a339
-
SHA512
c3f9d578816ba1040fb70a2db2d637125111089c5c3d77a8c46da149093b20f29221fe24be0ca9f62b9f4d072f8ec68fd28e2669e62c44ea83088d322e393626
-
SSDEEP
98304:C9wI1ePmRG4dReZRu4qSlgFOtWrvSw46Y3NzV+JCwknQxS:NIoPKGHRu4rlgFOwrvS33x+JeQ0
Static task
static1
Behavioral task
behavioral1
Sample
8f7b2a199d426794fae203604a10575f7b331a0c0ed102bad7b90a5fc875a339.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
8f7b2a199d426794fae203604a10575f7b331a0c0ed102bad7b90a5fc875a339.exe
Resource
win11-20240508-en
Malware Config
Targets
-
-
Target
8f7b2a199d426794fae203604a10575f7b331a0c0ed102bad7b90a5fc875a339
-
Size
5.2MB
-
MD5
ce302e55b334b531abcf30d405b6a33a
-
SHA1
8653ca960e8a89483faecf885ac252c402b71cf6
-
SHA256
8f7b2a199d426794fae203604a10575f7b331a0c0ed102bad7b90a5fc875a339
-
SHA512
c3f9d578816ba1040fb70a2db2d637125111089c5c3d77a8c46da149093b20f29221fe24be0ca9f62b9f4d072f8ec68fd28e2669e62c44ea83088d322e393626
-
SSDEEP
98304:C9wI1ePmRG4dReZRu4qSlgFOtWrvSw46Y3NzV+JCwknQxS:NIoPKGHRu4rlgFOwrvS33x+JeQ0
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-