Overview

overview

10

Static

static

3

5db6236dda...xe.exe

windows7-x64

10

5db6236dda...xe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5db6236dda5724e94a0487e1b613d5eff9c5bfa7bda4852fe8f1acbf6a03a4f0exe.exe

  • Size

    6.7MB

  • Sample

    240109-xafhmahab3

  • MD5

    36ceaee10278facea2eddab36b7dfa80

  • SHA1

    a36e28a24d8f094114a5115541de7600fc9d9bfd

  • SHA256

    5db6236dda5724e94a0487e1b613d5eff9c5bfa7bda4852fe8f1acbf6a03a4f0

  • SHA512

    a075f469eecbda256b007ea1c2144dc1b7bf9c896e383e7004711e6bdeff15ba584dd0b969aa0eb23801ffb254c30025e27c1b5d3b8d44724eef9709fcf6a538

  • SSDEEP

    196608:adWy3xQT1CAgQdyvzLjFrS8UB7ue10RxQk4dD:aQy32RCteyL1S8GaoQQJdD

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      5db6236dda5724e94a0487e1b613d5eff9c5bfa7bda4852fe8f1acbf6a03a4f0exe.exe

    • Size

      6.7MB

    • MD5

      36ceaee10278facea2eddab36b7dfa80

    • SHA1

      a36e28a24d8f094114a5115541de7600fc9d9bfd

    • SHA256

      5db6236dda5724e94a0487e1b613d5eff9c5bfa7bda4852fe8f1acbf6a03a4f0

    • SHA512

      a075f469eecbda256b007ea1c2144dc1b7bf9c896e383e7004711e6bdeff15ba584dd0b969aa0eb23801ffb254c30025e27c1b5d3b8d44724eef9709fcf6a538

    • SSDEEP

      196608:adWy3xQT1CAgQdyvzLjFrS8UB7ue10RxQk4dD:aQy32RCteyL1S8GaoQQJdD

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks