Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64c64d90b01126f50c0bd53ad8e5838d1b58a350c8fe76328f4b5d418480ec16

  • Size

    4.7MB

  • Sample

    240726-bd3lnsweqr

  • MD5

    260dcdc75d814f37316f3cf9d5e98afe

  • SHA1

    ae28df27f9f3859beded98eae9b44923f8d7341f

  • SHA256

    64c64d90b01126f50c0bd53ad8e5838d1b58a350c8fe76328f4b5d418480ec16

  • SHA512

    5c8177027a4fc143e75882e8396d4c9f4cd305aa5d265ce1d0c5c3007ac5080d3d1003b997374982e29e6b71a216110238e73e4cfda73ef59f87d0b5bae426b7

  • SSDEEP

    98304:CgrI6ERlJISyPcQ0BcNPgxeUEYOXyb4r5bMM3o8wDJYxrhiPS:rrdSKaBGoxeJXe4r5bMM3vwDJItAS

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      64c64d90b01126f50c0bd53ad8e5838d1b58a350c8fe76328f4b5d418480ec16

    • Size

      4.7MB

    • MD5

      260dcdc75d814f37316f3cf9d5e98afe

    • SHA1

      ae28df27f9f3859beded98eae9b44923f8d7341f

    • SHA256

      64c64d90b01126f50c0bd53ad8e5838d1b58a350c8fe76328f4b5d418480ec16

    • SHA512

      5c8177027a4fc143e75882e8396d4c9f4cd305aa5d265ce1d0c5c3007ac5080d3d1003b997374982e29e6b71a216110238e73e4cfda73ef59f87d0b5bae426b7

    • SSDEEP

      98304:CgrI6ERlJISyPcQ0BcNPgxeUEYOXyb4r5bMM3o8wDJYxrhiPS:rrdSKaBGoxeJXe4r5bMM3vwDJItAS

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks