General

  • Target

    98b5ee6145b1fa02b30359b622d0eec261b8e25d887ed697611c6fccca06ee76

  • Size

    4.6MB

  • Sample

    240530-29xy6sef76

  • MD5

    296bc998fefb0791f0be19d5b5b76652

  • SHA1

    fe400e81a025314f25c89da6f0ee1f5a0d939170

  • SHA256

    98b5ee6145b1fa02b30359b622d0eec261b8e25d887ed697611c6fccca06ee76

  • SHA512

    dde4efc6daee7e1019ad30601ea292bc1a62a0fd5bd762846387f10dde840b20685fa57145832ac86f330689a9fddcd0efc0117d47adc3ce277a73d957f8c1dc

  • SSDEEP

    98304:mKVUquGLN8txujVzV1DKN2gjM9ZTQ1ID7Ws95b:J8BtxujENHMTQ1Ab

Malware Config

Targets

    • Target

      98b5ee6145b1fa02b30359b622d0eec261b8e25d887ed697611c6fccca06ee76

    • Size

      4.6MB

    • MD5

      296bc998fefb0791f0be19d5b5b76652

    • SHA1

      fe400e81a025314f25c89da6f0ee1f5a0d939170

    • SHA256

      98b5ee6145b1fa02b30359b622d0eec261b8e25d887ed697611c6fccca06ee76

    • SHA512

      dde4efc6daee7e1019ad30601ea292bc1a62a0fd5bd762846387f10dde840b20685fa57145832ac86f330689a9fddcd0efc0117d47adc3ce277a73d957f8c1dc

    • SSDEEP

      98304:mKVUquGLN8txujVzV1DKN2gjM9ZTQ1ID7Ws95b:J8BtxujENHMTQ1Ab

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks