General
-
Target
0ea506ad9750457744feb68ca5c9ccfd53cc0c0e75b96b939d97dba5555c44f9
-
Size
5.4MB
-
Sample
241101-x7rxxssngv
-
MD5
6588a0ddb0d39a31832f524703000510
-
SHA1
20636b06a8bc1008ab24326d29236bbc1e4605f7
-
SHA256
0ea506ad9750457744feb68ca5c9ccfd53cc0c0e75b96b939d97dba5555c44f9
-
SHA512
7bdb95f75a6ec1940251f44d430dd4be233bad198c5635ea9edd662bf1b790b4643c2454a1bfa071dfb0f4e9b3883ac2cc7d4cd954419e0e5f1145da3ad17bf0
-
SSDEEP
98304:CYpR8WfLkl4WNXUik154fSNKPRymOEzARHgvMajLZnSPnrn+Ve2/jT3GnDo02FgM:Zfc4WNEh4HvOKA1g00LMPnr+VT3GDH2/
Malware Config
Targets
-
-
Target
0ea506ad9750457744feb68ca5c9ccfd53cc0c0e75b96b939d97dba5555c44f9
-
Size
5.4MB
-
MD5
6588a0ddb0d39a31832f524703000510
-
SHA1
20636b06a8bc1008ab24326d29236bbc1e4605f7
-
SHA256
0ea506ad9750457744feb68ca5c9ccfd53cc0c0e75b96b939d97dba5555c44f9
-
SHA512
7bdb95f75a6ec1940251f44d430dd4be233bad198c5635ea9edd662bf1b790b4643c2454a1bfa071dfb0f4e9b3883ac2cc7d4cd954419e0e5f1145da3ad17bf0
-
SSDEEP
98304:CYpR8WfLkl4WNXUik154fSNKPRymOEzARHgvMajLZnSPnrn+Ve2/jT3GnDo02FgM:Zfc4WNEh4HvOKA1g00LMPnr+VT3GDH2/
Score10/10-
Detect Socks5Systemz Payload
-
Socks5Systemz
Socks5Systemz is a botnet written in C++.
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-