Overview

overview

10

Static

static

3

c1c8f9ca0e...06.exe

windows7-x64

10

c1c8f9ca0e...06.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1c8f9ca0e9a2ba562edb5f34b7035473421faa58499a84e6baac92cd5527406

  • Size

    5.3MB

  • Sample

    241104-3ekk2azbra

  • MD5

    89e60bfedc086c13b8e66982aa411b33

  • SHA1

    c9b88cdef2eee10c8e0f82704967e5e1ffcdd083

  • SHA256

    c1c8f9ca0e9a2ba562edb5f34b7035473421faa58499a84e6baac92cd5527406

  • SHA512

    3ea384fe17297af5c7118e97e7513519a13d74b1c92ec0b50c337c804dc2776f6d0ebd41f69695759c271cbd399a35a009ca26e46cd51e10312468fc5b7c64ef

  • SSDEEP

    98304:ebd+SssSvHoV1UPgTZHF4PFpODSdbmGl4s8cB2sxTRUebYeQ+uLREE02:6+HIV1HTFcb4SRmGSsyh1wEWE02

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      c1c8f9ca0e9a2ba562edb5f34b7035473421faa58499a84e6baac92cd5527406

    • Size

      5.3MB

    • MD5

      89e60bfedc086c13b8e66982aa411b33

    • SHA1

      c9b88cdef2eee10c8e0f82704967e5e1ffcdd083

    • SHA256

      c1c8f9ca0e9a2ba562edb5f34b7035473421faa58499a84e6baac92cd5527406

    • SHA512

      3ea384fe17297af5c7118e97e7513519a13d74b1c92ec0b50c337c804dc2776f6d0ebd41f69695759c271cbd399a35a009ca26e46cd51e10312468fc5b7c64ef

    • SSDEEP

      98304:ebd+SssSvHoV1UPgTZHF4PFpODSdbmGl4s8cB2sxTRUebYeQ+uLREE02:6+HIV1HTFcb4SRmGSsyh1wEWE02

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks