Overview

overview

10

Static

static

3

0efc629789...88.exe

windows7-x64

10

0efc629789...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0efc629789fddce39d1fbf32c1ce7fa769d8535b7c58cc493896dc2d34fcdb88

  • Size

    7.5MB

  • Sample

    240212-rh17eaff6v

  • MD5

    ac5161f4d107deb3612c73efe6866dbc

  • SHA1

    0b1cebc8af41f21736671c969d38e71aa77639a8

  • SHA256

    0efc629789fddce39d1fbf32c1ce7fa769d8535b7c58cc493896dc2d34fcdb88

  • SHA512

    76168c03f71ccf2ece58f88227ebfdfb90bc223c0790ce241a1de8a1fd716deb6737bf064509f6e645a3fd0c4b501bc58ea10381186aa6c0a7a65475164562be

  • SSDEEP

    196608:N6x4LEuDxgt/o20iIZ2HqVcZExA8QFVWdM:Qil9iA3sKVBATVMM

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      0efc629789fddce39d1fbf32c1ce7fa769d8535b7c58cc493896dc2d34fcdb88

    • Size

      7.5MB

    • MD5

      ac5161f4d107deb3612c73efe6866dbc

    • SHA1

      0b1cebc8af41f21736671c969d38e71aa77639a8

    • SHA256

      0efc629789fddce39d1fbf32c1ce7fa769d8535b7c58cc493896dc2d34fcdb88

    • SHA512

      76168c03f71ccf2ece58f88227ebfdfb90bc223c0790ce241a1de8a1fd716deb6737bf064509f6e645a3fd0c4b501bc58ea10381186aa6c0a7a65475164562be

    • SSDEEP

      196608:N6x4LEuDxgt/o20iIZ2HqVcZExA8QFVWdM:Qil9iA3sKVBATVMM

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks