General

  • Target

    1db923d92258d09980de5d454b997bf8f1eb86cc66ff86f1228dfc6001a6e2caN

  • Size

    4.2MB

  • Sample

    241104-3vx63asnaq

  • MD5

    520032826525047277dbe788c71522a0

  • SHA1

    464f3a511b62da428fa823f0ea5b162fda063f08

  • SHA256

    1db923d92258d09980de5d454b997bf8f1eb86cc66ff86f1228dfc6001a6e2ca

  • SHA512

    0255324d69eab8b2b2ae1d44dca60a12bac386cc4c3a931f77a0e187c31772abce983054dbafd57927d7b8d39ba333efe54ffb513b59a66b8ef6efbcdba81af2

  • SSDEEP

    98304:IkOxuz5BpTrVqEpwuA2ONMy1TAWmTnv19ZKH5xQ:xOkzBTr1wuA2OF1TAWWv19kHbQ

Malware Config

Targets

    • Target

      1db923d92258d09980de5d454b997bf8f1eb86cc66ff86f1228dfc6001a6e2caN

    • Size

      4.2MB

    • MD5

      520032826525047277dbe788c71522a0

    • SHA1

      464f3a511b62da428fa823f0ea5b162fda063f08

    • SHA256

      1db923d92258d09980de5d454b997bf8f1eb86cc66ff86f1228dfc6001a6e2ca

    • SHA512

      0255324d69eab8b2b2ae1d44dca60a12bac386cc4c3a931f77a0e187c31772abce983054dbafd57927d7b8d39ba333efe54ffb513b59a66b8ef6efbcdba81af2

    • SSDEEP

      98304:IkOxuz5BpTrVqEpwuA2ONMy1TAWmTnv19ZKH5xQ:xOkzBTr1wuA2OF1TAWWv19kHbQ

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Socks5systemz family

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks