Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ee662511c5...d1.exe

windows7-x64

10

ee662511c5...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee662511c5f8dbf74f7b8b5151464bd1.exe

  • Size

    4.6MB

  • Sample

    240111-fkpevaehgj

  • MD5

    ee662511c5f8dbf74f7b8b5151464bd1

  • SHA1

    5423c7913005bc5f19ab13cef9c405f97b54614a

  • SHA256

    1fa544646d6c53b124a6c43bdb0479fcd254e74dafe992c537ad40d7b7d0a850

  • SHA512

    c64cca3d608ee3e3045dcddaa17ac4540e11593e5064b6e549610739059c4c0fc515f442cf0346a27618e197df0c9796e6d761c935185282f54fc563fb823341

  • SSDEEP

    98304:ti/pvA3Q7k+4dniEoqAmVTNKjmijbsjwZjUNHlyBmvVPahUhlFNTndZ7kq:0/pv0ekNdhoSt4jpbsjwiNHam9PXFx7L

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      ee662511c5f8dbf74f7b8b5151464bd1.exe

    • Size

      4.6MB

    • MD5

      ee662511c5f8dbf74f7b8b5151464bd1

    • SHA1

      5423c7913005bc5f19ab13cef9c405f97b54614a

    • SHA256

      1fa544646d6c53b124a6c43bdb0479fcd254e74dafe992c537ad40d7b7d0a850

    • SHA512

      c64cca3d608ee3e3045dcddaa17ac4540e11593e5064b6e549610739059c4c0fc515f442cf0346a27618e197df0c9796e6d761c935185282f54fc563fb823341

    • SSDEEP

      98304:ti/pvA3Q7k+4dniEoqAmVTNKjmijbsjwZjUNHlyBmvVPahUhlFNTndZ7kq:0/pv0ekNdhoSt4jpbsjwiNHam9PXFx7L

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks