General

  • Target

    782a34f523527698dbdee3881a90564f83f17a6f9ad3b67015322456d3ed40ba

  • Size

    5.4MB

  • Sample

    241102-hdc5caylbt

  • MD5

    19f23553a2c632bd494146051095b728

  • SHA1

    f41da01d070f8fd7bcf1f7ab215204c856323780

  • SHA256

    782a34f523527698dbdee3881a90564f83f17a6f9ad3b67015322456d3ed40ba

  • SHA512

    8a2b6cb259832e2afed566a120504a22ddc4c4bc12e74e47db3ca4801b6c09c2ca6f61961ab9dc6158ef67f4122a853711ca73fa40bf6b1dcf461df95d97dbe3

  • SSDEEP

    98304:Co3l9OnBmTBDWHFUtcPZ5vvelsAm0FDV7MaP8PZryUwK7lm8kfZzN5QxC0:Jl9OBmTcGtwZ5vGlsD0FaK8U/KlYRN5G

Malware Config

Targets

    • Target

      782a34f523527698dbdee3881a90564f83f17a6f9ad3b67015322456d3ed40ba

    • Size

      5.4MB

    • MD5

      19f23553a2c632bd494146051095b728

    • SHA1

      f41da01d070f8fd7bcf1f7ab215204c856323780

    • SHA256

      782a34f523527698dbdee3881a90564f83f17a6f9ad3b67015322456d3ed40ba

    • SHA512

      8a2b6cb259832e2afed566a120504a22ddc4c4bc12e74e47db3ca4801b6c09c2ca6f61961ab9dc6158ef67f4122a853711ca73fa40bf6b1dcf461df95d97dbe3

    • SSDEEP

      98304:Co3l9OnBmTBDWHFUtcPZ5vvelsAm0FDV7MaP8PZryUwK7lm8kfZzN5QxC0:Jl9OBmTcGtwZ5vGlsD0FaK8U/KlYRN5G

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Socks5systemz family

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks