Overview

overview

10

Static

static

10

socks.exe

windows7-x64

6

socks.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    socks.exe

  • Size

    8KB

  • Sample

    230802-c2w98scc93

  • MD5

    d2c6bccf7c72af5d76d555c7272dded9

  • SHA1

    2bb01b0a92c6546534e9745f69d16847569942bd

  • SHA256

    511db1f65525516f10cdb0255316d484b0e11c25b6bc5a6ebcf08a9b2f8c9a1d

  • SHA512

    ad237fd3bf1325502eb5cccadfb125c4795dd2363834c8cbe9b78c9e0abf1211e0105a82ab5d2fda17b07d428a16f8a2f88e360d51baa0a5e3a17a5bd5533b58

  • SSDEEP

    96:viujWjxtYqRQ3ea4W/E/MM4odWLora0Fy/eKW9ZGcp2xFK+gEjaOoSM:KujWjlQOa4P/ZbdV6eKxFK+dHM

Score
10/10
systembcpersistence

Malware Config

Extracted

Family

systembc

C2

185.106.93.188:4301

194.87.111.29:4301

Targets

    • Target

      socks.exe

    • Size

      8KB

    • MD5

      d2c6bccf7c72af5d76d555c7272dded9

    • SHA1

      2bb01b0a92c6546534e9745f69d16847569942bd

    • SHA256

      511db1f65525516f10cdb0255316d484b0e11c25b6bc5a6ebcf08a9b2f8c9a1d

    • SHA512

      ad237fd3bf1325502eb5cccadfb125c4795dd2363834c8cbe9b78c9e0abf1211e0105a82ab5d2fda17b07d428a16f8a2f88e360d51baa0a5e3a17a5bd5533b58

    • SSDEEP

      96:viujWjxtYqRQ3ea4W/E/MM4odWLora0Fy/eKW9ZGcp2xFK+gEjaOoSM:KujWjlQOa4P/ZbdV6eKxFK+dHM

    Score
    6/10
    persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks