Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1fe30693ae9484c4eddccac4d760cf1cad545d80c27b11cb3da827e2a13852a8

  • Size

    5.0MB

  • Sample

    240712-m78kkashnc

  • MD5

    e564edac5640623ea9e926d9cc99b3e5

  • SHA1

    a4969eb3289cf2060a36ffc95afd84535e8d2653

  • SHA256

    1fe30693ae9484c4eddccac4d760cf1cad545d80c27b11cb3da827e2a13852a8

  • SHA512

    2ca712cdb0529cc2a855e4004f461f796b923045a709a8a5ef28fa0d46b44ea0a8e9f4ed024d86eebf854ab13b016f32c44fe1f707957baf2b7a7fdcc76fc000

  • SSDEEP

    98304:CN0/bHz7ZwqEMEndLBU27G6IVFXe7orRLY3Rd5bH+ErrY/KZrJtQx3:dCwkhyiG6IIomhT5PYSZrJtQF

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      1fe30693ae9484c4eddccac4d760cf1cad545d80c27b11cb3da827e2a13852a8

    • Size

      5.0MB

    • MD5

      e564edac5640623ea9e926d9cc99b3e5

    • SHA1

      a4969eb3289cf2060a36ffc95afd84535e8d2653

    • SHA256

      1fe30693ae9484c4eddccac4d760cf1cad545d80c27b11cb3da827e2a13852a8

    • SHA512

      2ca712cdb0529cc2a855e4004f461f796b923045a709a8a5ef28fa0d46b44ea0a8e9f4ed024d86eebf854ab13b016f32c44fe1f707957baf2b7a7fdcc76fc000

    • SSDEEP

      98304:CN0/bHz7ZwqEMEndLBU27G6IVFXe7orRLY3Rd5bH+ErrY/KZrJtQx3:dCwkhyiG6IIomhT5PYSZrJtQF

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks