General

  • Target

    77fda731b9de0d3a30dda28ed65939e8669ef0a072a4c88efa2bb9e53bf0384e

  • Size

    3.7MB

  • Sample

    240810-hqd76szdmr

  • MD5

    73348d4d44c0a8e14644795fd2426c44

  • SHA1

    866d1b218b5723bcdfffc5b0b17eda051904cfa4

  • SHA256

    77fda731b9de0d3a30dda28ed65939e8669ef0a072a4c88efa2bb9e53bf0384e

  • SHA512

    0c721ba7845aee6cb30de0d6218b21022475c1e4f9c487190cde46073527d5f173ad38166ab39a30352c7a10b8e1f6b6dca08a84a333655cf8c8e1b1a69dea76

  • SSDEEP

    98304:NTIj/PZQFKdUrBLJucGVBD3jF2NZlGAl/eOGLS4MIcWjr4KHsv6D+dXi:WZQFKd+ucGVBbhslmO6cWjr4KHQ6qY

Malware Config

Targets

    • Target

      77fda731b9de0d3a30dda28ed65939e8669ef0a072a4c88efa2bb9e53bf0384e

    • Size

      3.7MB

    • MD5

      73348d4d44c0a8e14644795fd2426c44

    • SHA1

      866d1b218b5723bcdfffc5b0b17eda051904cfa4

    • SHA256

      77fda731b9de0d3a30dda28ed65939e8669ef0a072a4c88efa2bb9e53bf0384e

    • SHA512

      0c721ba7845aee6cb30de0d6218b21022475c1e4f9c487190cde46073527d5f173ad38166ab39a30352c7a10b8e1f6b6dca08a84a333655cf8c8e1b1a69dea76

    • SSDEEP

      98304:NTIj/PZQFKdUrBLJucGVBD3jF2NZlGAl/eOGLS4MIcWjr4KHsv6D+dXi:WZQFKd+ucGVBbhslmO6cWjr4KHQ6qY

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks