General
-
Target
8c483e62079bd5a0eb60543f87364c059aabeb222c276bdfb7edb0472e3b46be
-
Size
5.4MB
-
Sample
241102-xk6gsssdnb
-
MD5
aeefbb1694766cb042d5d3651a548c1e
-
SHA1
a6e594f8d0dbceeb203c6d2209b70697353154e0
-
SHA256
8c483e62079bd5a0eb60543f87364c059aabeb222c276bdfb7edb0472e3b46be
-
SHA512
4f24653c75f8652bc639bc5a7b2bc6176160365a8b0b302d4fa29a3c80a188aed3435b98d66e9acb530a122fe5a5a5d7cf88bb7b133326df2c2660e4c4f25025
-
SSDEEP
98304:CBSajnxFTvUtPvrHBs6ZusRPqDON9rdPVozTEaVJqYD12DqlgjSevKUguLEgadka:mSajnL7UtPvrHBsqBs4rdtoJVJqy2Dqz
Malware Config
Targets
-
-
Target
8c483e62079bd5a0eb60543f87364c059aabeb222c276bdfb7edb0472e3b46be
-
Size
5.4MB
-
MD5
aeefbb1694766cb042d5d3651a548c1e
-
SHA1
a6e594f8d0dbceeb203c6d2209b70697353154e0
-
SHA256
8c483e62079bd5a0eb60543f87364c059aabeb222c276bdfb7edb0472e3b46be
-
SHA512
4f24653c75f8652bc639bc5a7b2bc6176160365a8b0b302d4fa29a3c80a188aed3435b98d66e9acb530a122fe5a5a5d7cf88bb7b133326df2c2660e4c4f25025
-
SSDEEP
98304:CBSajnxFTvUtPvrHBs6ZusRPqDON9rdPVozTEaVJqYD12DqlgjSevKUguLEgadka:mSajnL7UtPvrHBsqBs4rdtoJVJqy2Dqz
Score10/10-
Detect Socks5Systemz Payload
-
Socks5Systemz
Socks5Systemz is a botnet written in C++.
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-