Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    350b00e72bf14c19749c02bed662644e53f82c6835cbe7c5fa16d39e52b88359

  • Size

    5.6MB

  • Sample

    240725-2jbm9ayhkk

  • MD5

    5bd441f3a478b4a3aac6e81d6a3b8fff

  • SHA1

    2454da127059514f05601a79365caff499f00cda

  • SHA256

    350b00e72bf14c19749c02bed662644e53f82c6835cbe7c5fa16d39e52b88359

  • SHA512

    4cacca4b5776d2fca75c84426d6141cd83b5f5328daa8fedfe147b6640ad3e02de02a357cef263c814597b1bcf6975b655e98d90f9c3ab5c926dbdffe52ffcd6

  • SSDEEP

    98304:OiOopjTjaWMXc2j/6vsT2m/QpBnV/+Uy40iDzk1aZm5Ua/4ujJzPuJIzKnCE2ukW:7TjaZHGvlm/QpL/+FqQx5pAqJTuJll2o

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      350b00e72bf14c19749c02bed662644e53f82c6835cbe7c5fa16d39e52b88359

    • Size

      5.6MB

    • MD5

      5bd441f3a478b4a3aac6e81d6a3b8fff

    • SHA1

      2454da127059514f05601a79365caff499f00cda

    • SHA256

      350b00e72bf14c19749c02bed662644e53f82c6835cbe7c5fa16d39e52b88359

    • SHA512

      4cacca4b5776d2fca75c84426d6141cd83b5f5328daa8fedfe147b6640ad3e02de02a357cef263c814597b1bcf6975b655e98d90f9c3ab5c926dbdffe52ffcd6

    • SSDEEP

      98304:OiOopjTjaWMXc2j/6vsT2m/QpBnV/+Uy40iDzk1aZm5Ua/4ujJzPuJIzKnCE2ukW:7TjaZHGvlm/QpL/+FqQx5pAqJTuJll2o

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks