Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdb0794eae952ccb9f578c6a0f9074b28074d5d0f96997bc811b938494bf8db5

  • Size

    5.5MB

  • Sample

    240524-h7l94shf8v

  • MD5

    503aeec17eee650e815927b78d27aaef

  • SHA1

    ca838bbcdf723bfbdcce900bbbceccf512d0a4f6

  • SHA256

    bdb0794eae952ccb9f578c6a0f9074b28074d5d0f96997bc811b938494bf8db5

  • SHA512

    e7392e325db2b745be2ac6c99e8867cf426784316cd5a2c4f0e6c6d79d92609d409329c9afba03a0a10c3a912e2b7ad7a974317c2d1f98537e53648e23bd3cd6

  • SSDEEP

    98304:m2jOVGb+vPPK3s+rfTvn/w9xPnez+bgp+X0GZERIl9F7+bfZS3b4ARBxgGI6kZl:WG6/KPrfTfkRpbs9GCO9UbfZU8mxTFwl

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      bdb0794eae952ccb9f578c6a0f9074b28074d5d0f96997bc811b938494bf8db5

    • Size

      5.5MB

    • MD5

      503aeec17eee650e815927b78d27aaef

    • SHA1

      ca838bbcdf723bfbdcce900bbbceccf512d0a4f6

    • SHA256

      bdb0794eae952ccb9f578c6a0f9074b28074d5d0f96997bc811b938494bf8db5

    • SHA512

      e7392e325db2b745be2ac6c99e8867cf426784316cd5a2c4f0e6c6d79d92609d409329c9afba03a0a10c3a912e2b7ad7a974317c2d1f98537e53648e23bd3cd6

    • SSDEEP

      98304:m2jOVGb+vPPK3s+rfTvn/w9xPnez+bgp+X0GZERIl9F7+bfZS3b4ARBxgGI6kZl:WG6/KPrfTfkRpbs9GCO9UbfZU8mxTFwl

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks