Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

836702e8e9...7e.exe

windows7-x64

10

836702e8e9...7e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb7073f79738bc3871d8fdcdda2f6d07.bin

  • Size

    3.9MB

  • Sample

    240113-d9dcrsbebl

  • MD5

    5f3fafbf2c77008c59e2b9ec740811ea

  • SHA1

    a57f33167c6c16f9fe1c637e91ff839a0d55d53a

  • SHA256

    53cec1cb9e1e36cb8842d8e2a0a8eaf95f371adf94de813e9814ffe7453e9b4c

  • SHA512

    54d0641727e5c5ee77695a58d14ac7d8e56fd3cd932f9f802ef235a4ba1153a95309cd569285215a05f0ec41ae914a6a4cc1e445e1e181fbb6cf4c0071132d2a

  • SSDEEP

    98304:lVO6tiCeZw1yT5v6VD0yCsRWsC0rj7e5CHf0MCC76KAK682YYqE:lVOEwK+5vquseIHs1yyx85g

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      836702e8e9b5cc72d071836f7aece14f2f55103db492110feb3d1df399cb5a7e.exe

    • Size

      3.9MB

    • MD5

      eb7073f79738bc3871d8fdcdda2f6d07

    • SHA1

      660b50ca01cb57643dabc899305bb56272874070

    • SHA256

      836702e8e9b5cc72d071836f7aece14f2f55103db492110feb3d1df399cb5a7e

    • SHA512

      5b271b1d56ff77f62dccde03c94c7767b4133cc1467f6f85ffec08cdcec8efcb91c8657d2c308db9af576a54abaeb5738b837edce123d05c655968573c9da4ac

    • SSDEEP

      98304:Ci5y4bUjbSiDmlFQh0GSRxSe5hbFSXQrUCngi+5PpkE:n5boj5D+yh0GSrSUbIALngrF

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks