Overview

overview

10

Static

static

3

3b20d2b68f...8e.exe

windows7-x64

10

3b20d2b68f...8e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89c4b89bfe3c467d402be1652d128fae.bin

  • Size

    4.3MB

  • Sample

    240110-dn95lscffk

  • MD5

    e477a31c1a0ed4d868038b2cb2096cbe

  • SHA1

    da0b632a995ae0dbf2d62d304d0bc03d56a8f9e2

  • SHA256

    0e1ae6623efaed30d64c472ec9ae26d848af23d64b06d78af3929e83658c80d8

  • SHA512

    e2f55ca125965e7cc5ae0d380e71a6a493ab2f1e22cae2ee4e519f767c095620998496564b604e990f6a88d4fa07a1134380868b02c79d9ce46f690f86a2aefc

  • SSDEEP

    98304:Cs/Be9lQZJOwIkHK9hOPmnqxMbAMXUe8i62oYZ8AkOxiSraYaxkj:MwJkSK7ZwMvXUTF2N8N1S2jCj

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      3b20d2b68fa07bffa05fb0c61332ef5dbdd5aae247471d7c9a98e753b4a00a8e.exe

    • Size

      4.6MB

    • MD5

      89c4b89bfe3c467d402be1652d128fae

    • SHA1

      7563e12553a9baef657da94329f211883dad5dbf

    • SHA256

      3b20d2b68fa07bffa05fb0c61332ef5dbdd5aae247471d7c9a98e753b4a00a8e

    • SHA512

      6c3827371fcf256bf9ee681fcfc9cd44896eae59e43a5f31b7c0580c034a5cd1ec09a31d17e9bb943bab8ae9d5c05be70cc2bae3e514deb29a49739df89dc08b

    • SSDEEP

      98304:jX2LPehZtMJlsykp+UMzCqwpnYKx3tTa5HVfWt0VW+iDmGaKi2u1i0I+pqIjYd49:b4PIF1nYKxQ51fY0I+JN2b0xIIj24dD

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks