Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    469665a3fca0356edee8331968bf723e8cd6293ec0e4d1ed490d2dd53337207c

  • Size

    5.0MB

  • Sample

    240710-llhlkszfmj

  • MD5

    cc92d0c2b8b0f10a031b6e9ec4e1a971

  • SHA1

    13a5b228a322ecb7f70ec5f70d9271eb9182a826

  • SHA256

    469665a3fca0356edee8331968bf723e8cd6293ec0e4d1ed490d2dd53337207c

  • SHA512

    007cf813e5caffe1b1c2df408f383a976272a30197a15e85e5b1f66099a608fc854136075da0151f1f19637ba49003a2000406a655e96ac5a5990c189e2690b6

  • SSDEEP

    98304:CrBnjJMihUX/Rrg/czjSsLfCQyUJly+Pc0CgDM4/RaPX29hfQxS:KBNb+5cmmsDCtOyx0Clnu9JQM

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      469665a3fca0356edee8331968bf723e8cd6293ec0e4d1ed490d2dd53337207c

    • Size

      5.0MB

    • MD5

      cc92d0c2b8b0f10a031b6e9ec4e1a971

    • SHA1

      13a5b228a322ecb7f70ec5f70d9271eb9182a826

    • SHA256

      469665a3fca0356edee8331968bf723e8cd6293ec0e4d1ed490d2dd53337207c

    • SHA512

      007cf813e5caffe1b1c2df408f383a976272a30197a15e85e5b1f66099a608fc854136075da0151f1f19637ba49003a2000406a655e96ac5a5990c189e2690b6

    • SSDEEP

      98304:CrBnjJMihUX/Rrg/czjSsLfCQyUJly+Pc0CgDM4/RaPX29hfQxS:KBNb+5cmmsDCtOyx0Clnu9JQM

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks