General

  • Target

    0b9b00b906f4eba8821722e69e8545e17df364076328755cab8f2bed2b15bb10

  • Size

    5.4MB

  • Sample

    241103-k8xtcazmdx

  • MD5

    d17b7aac2a862f8b46a346dd3a4d802e

  • SHA1

    b27ca51c79e142bed59d9746ab64492c6148adc8

  • SHA256

    0b9b00b906f4eba8821722e69e8545e17df364076328755cab8f2bed2b15bb10

  • SHA512

    1058e3199dd13360a63d457594a197409d050c904fa680142a880c148fff9e879d4fbf6b402a1fa66b4683e10c3f1cf071308ede2be0c5ba670593bc218af4bc

  • SSDEEP

    98304:QG+RfYhgilxwB9fAgvT/PbH2jrK5xh0PyXwzxEkki32v8DHCKoMcWNX0Az:6Qh9xOb/jWjrKnXwzXki32vEzncWR

Malware Config

Targets

    • Target

      0b9b00b906f4eba8821722e69e8545e17df364076328755cab8f2bed2b15bb10

    • Size

      5.4MB

    • MD5

      d17b7aac2a862f8b46a346dd3a4d802e

    • SHA1

      b27ca51c79e142bed59d9746ab64492c6148adc8

    • SHA256

      0b9b00b906f4eba8821722e69e8545e17df364076328755cab8f2bed2b15bb10

    • SHA512

      1058e3199dd13360a63d457594a197409d050c904fa680142a880c148fff9e879d4fbf6b402a1fa66b4683e10c3f1cf071308ede2be0c5ba670593bc218af4bc

    • SSDEEP

      98304:QG+RfYhgilxwB9fAgvT/PbH2jrK5xh0PyXwzxEkki32v8DHCKoMcWNX0Az:6Qh9xOb/jWjrKnXwzXki32vEzncWR

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Socks5systemz family

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks