General
-
Target
627910dfedb6a29e1920409fc74c20204de8bbe9afe3ad7d7532e420f4519ec5
-
Size
5.6MB
-
Sample
240704-bat55avhml
-
MD5
f9e6d1f73df1acdbb48759bd5bd631b4
-
SHA1
bb13c8822e11baa7a4625698b1851f59d7a95de9
-
SHA256
627910dfedb6a29e1920409fc74c20204de8bbe9afe3ad7d7532e420f4519ec5
-
SHA512
b7192b0f5e3d9d17872899ed0367aafadface5adfd5837cf847c60870f78578f904f974ccb0d701cab07dd35b56115cbe38f8491b0dbc53cdcd90135156d3aa9
-
SSDEEP
98304:CYpG3NoO0absvdigLeoOb2fOItn3cICqLFyYtcs+s7DmYKJPhYZ7zP4F3HPmGhQ0:7GdOvdiWeoNWIt3cICqLFyYth+s79MPt
Static task
static1
Behavioral task
behavioral1
Sample
627910dfedb6a29e1920409fc74c20204de8bbe9afe3ad7d7532e420f4519ec5.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
627910dfedb6a29e1920409fc74c20204de8bbe9afe3ad7d7532e420f4519ec5.exe
Resource
win11-20240611-en
Malware Config
Targets
-
-
Target
627910dfedb6a29e1920409fc74c20204de8bbe9afe3ad7d7532e420f4519ec5
-
Size
5.6MB
-
MD5
f9e6d1f73df1acdbb48759bd5bd631b4
-
SHA1
bb13c8822e11baa7a4625698b1851f59d7a95de9
-
SHA256
627910dfedb6a29e1920409fc74c20204de8bbe9afe3ad7d7532e420f4519ec5
-
SHA512
b7192b0f5e3d9d17872899ed0367aafadface5adfd5837cf847c60870f78578f904f974ccb0d701cab07dd35b56115cbe38f8491b0dbc53cdcd90135156d3aa9
-
SSDEEP
98304:CYpG3NoO0absvdigLeoOb2fOItn3cICqLFyYtcs+s7DmYKJPhYZ7zP4F3HPmGhQ0:7GdOvdiWeoNWIt3cICqLFyYth+s79MPt
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-