socks5systemz

General

Target
install.exe
Size 3.5MB
Sample240906-rljfrs1ank
SHA256 22aee22dda57ee1891a90019d4e84a173c73dcdc12f74d0064c6439fb4f4c81d
MD5 c1e8826c0e62242106b67a1b00441c82
SHA1 0a19ae118933d63083a61d2fdd907dafe2b7ce8c
SHA512 5e21aef12e9c073a86cece577b2fd8d8780de1d613a90e5be72b035d04d88b3778e401af6d1091fb9ca60b1d4172fa6a68c8a6e61750efd60f32e0d042ec7956
SSDEEP 98304:9/wAkPaQ0+MHU89Lz8zvTUHYWNgUW29xTJ1:dwJ50FHU8pz8bgxNz9hJ1
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  install.exe
- Size 3.5MB
- SHA256 22aee22dda57ee1891a90019d4e84a173c73dcdc12f74d0064c6439fb4f4c81d
- MD5 c1e8826c0e62242106b67a1b00441c82
- SHA1 0a19ae118933d63083a61d2fdd907dafe2b7ce8c
- SHA512 5e21aef12e9c073a86cece577b2fd8d8780de1d613a90e5be72b035d04d88b3778e401af6d1091fb9ca60b1d4172fa6a68c8a6e61750efd60f32e0d042ec7956
- SSDEEP 98304:9/wAkPaQ0+MHU89Lz8zvTUHYWNgUW29xTJ1:dwJ50FHU8pz8bgxNz9hJ1
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

socks5systemz botnet discovery
- Detect Socks5Systemz Payload
- Socks5Systemz
  Socks5Systemz is a botnet written in C++.
  botnet socks5systemz
- Executes dropped EXE
- Loads dropped DLL
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detect Socks5Systemz Payload

Executes dropped EXE

Loads dropped DLL

Unexpected DNS network traffic destination

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4