Overview

overview

10

Static

static

3

acd39606c9...bd.exe

windows7-x64

10

acd39606c9...bd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acd39606c95c2a5582f80c6f46bec9cea927294dae117452d87af8d3e6fdabbd

  • Size

    4.1MB

  • Sample

    241030-s5glysxqfl

  • MD5

    09f0934b89389a9dca75debcd2a6a8c7

  • SHA1

    18e0ad636a4bddb5e9f5e9ea5813e6478cfc859b

  • SHA256

    acd39606c95c2a5582f80c6f46bec9cea927294dae117452d87af8d3e6fdabbd

  • SHA512

    c4c4237b48447f64cd562c33d3e6447e4d8e3acbd61ca2fc2fd296bda96df0ef27ea061612e7fce0d33fc6b01031254f49c79ed6c245b4e32ec238b185817bb6

  • SSDEEP

    98304:IHaz2BdVXO3DHYfq5x84Ulewa+8WPS1Kp0hmkTeuLN:eXcnDIA+Rxp0vHN

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      acd39606c95c2a5582f80c6f46bec9cea927294dae117452d87af8d3e6fdabbd

    • Size

      4.1MB

    • MD5

      09f0934b89389a9dca75debcd2a6a8c7

    • SHA1

      18e0ad636a4bddb5e9f5e9ea5813e6478cfc859b

    • SHA256

      acd39606c95c2a5582f80c6f46bec9cea927294dae117452d87af8d3e6fdabbd

    • SHA512

      c4c4237b48447f64cd562c33d3e6447e4d8e3acbd61ca2fc2fd296bda96df0ef27ea061612e7fce0d33fc6b01031254f49c79ed6c245b4e32ec238b185817bb6

    • SSDEEP

      98304:IHaz2BdVXO3DHYfq5x84Ulewa+8WPS1Kp0hmkTeuLN:eXcnDIA+Rxp0vHN

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks