General

  • Target

    6f45cee29190efd5c91d2ff38af35f764ff0711952730d9bd2df855990c3f70e

  • Size

    5.7MB

  • Sample

    240530-22qj5aec26

  • MD5

    20066d8922890dbda62bc2fe1caba39b

  • SHA1

    07102edb35e3a81c79b3a3741393335f3afd2613

  • SHA256

    6f45cee29190efd5c91d2ff38af35f764ff0711952730d9bd2df855990c3f70e

  • SHA512

    cc8a31f5c4aafb49ec8e1e24bbdc8856dcb0e51798e05496a484700c3ab186ab278fe4cfd40474e1f23ea7746e4abf4903c2d86981b751a2ecf269d473376369

  • SSDEEP

    98304:mrt/dOrg3QQVcmrHodnW6PKpVegkJMdMQP+n8XRzaoKZUxxgKLf/rReUnH+b20QR:6/93tsdnW6P5dQP+8IoKZU3zjjReweKj

Malware Config

Targets

    • Target

      6f45cee29190efd5c91d2ff38af35f764ff0711952730d9bd2df855990c3f70e

    • Size

      5.7MB

    • MD5

      20066d8922890dbda62bc2fe1caba39b

    • SHA1

      07102edb35e3a81c79b3a3741393335f3afd2613

    • SHA256

      6f45cee29190efd5c91d2ff38af35f764ff0711952730d9bd2df855990c3f70e

    • SHA512

      cc8a31f5c4aafb49ec8e1e24bbdc8856dcb0e51798e05496a484700c3ab186ab278fe4cfd40474e1f23ea7746e4abf4903c2d86981b751a2ecf269d473376369

    • SSDEEP

      98304:mrt/dOrg3QQVcmrHodnW6PKpVegkJMdMQP+n8XRzaoKZUxxgKLf/rReUnH+b20QR:6/93tsdnW6P5dQP+8IoKZU3zjjReweKj

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks