Overview

overview

10

Static

static

3

dc841fdb40...23.exe

windows7-x64

10

dc841fdb40...23.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc841fdb4034db33a1bac77aa6a6bf5e472e79529933b672d6446e595d0ed523

  • Size

    5.4MB

  • Sample

    241104-lc6baaxmf1

  • MD5

    d40ffa33f1bf3bf1db97f6fa46940e0e

  • SHA1

    e6dffda3a08a32b8788c4e766d83ca129dc51bc8

  • SHA256

    dc841fdb4034db33a1bac77aa6a6bf5e472e79529933b672d6446e595d0ed523

  • SHA512

    2c1fcbe9aca3c38824247b761b3fadd71f79210768fcd43633f648b5ae823afa816c7a88937c091de4fcb79627fe453261b7d51d3f2e09681ec0f322fc16b22e

  • SSDEEP

    98304:QBBdUsbMxr5N0JBLeDzVg4OYsEMYbBnPfMGSWDR95Ag9qNnzPh:+dVQx1NMsDizYAYVPfZ/t9ylh

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      dc841fdb4034db33a1bac77aa6a6bf5e472e79529933b672d6446e595d0ed523

    • Size

      5.4MB

    • MD5

      d40ffa33f1bf3bf1db97f6fa46940e0e

    • SHA1

      e6dffda3a08a32b8788c4e766d83ca129dc51bc8

    • SHA256

      dc841fdb4034db33a1bac77aa6a6bf5e472e79529933b672d6446e595d0ed523

    • SHA512

      2c1fcbe9aca3c38824247b761b3fadd71f79210768fcd43633f648b5ae823afa816c7a88937c091de4fcb79627fe453261b7d51d3f2e09681ec0f322fc16b22e

    • SSDEEP

      98304:QBBdUsbMxr5N0JBLeDzVg4OYsEMYbBnPfMGSWDR95Ag9qNnzPh:+dVQx1NMsDizYAYVPfZ/t9ylh

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks