General
-
Target
c2bcec140f2d259d4dfee6d962b42a648561ea3d7b6f9694f963680ef5fd874a
-
Size
5.0MB
-
Sample
241105-h9ps1sxhlk
-
MD5
f1080ea8b41a7a08700294341a525201
-
SHA1
658fc63e5c04e9983131aca7cf4ec81443f7fdca
-
SHA256
c2bcec140f2d259d4dfee6d962b42a648561ea3d7b6f9694f963680ef5fd874a
-
SHA512
c1d9331ec61a187e7e485a778d46388a3e96f2a11a47f51ccca40b0bc99a878ee360b65a8cb12be9067e5e8a327b1c360055ca8cbe493b1433966da25d3ec6b7
-
SSDEEP
98304:ecGssbYuT6EFCQJb6bPFL9wMe5cfD+emfVQH3+/Ncgg/kmnOF1Xkw+mK7fONQ3jd:YbLFFCQgjFL9w9yD+DqO/NUkeOnk1mkP
Malware Config
Targets
-
-
Target
c2bcec140f2d259d4dfee6d962b42a648561ea3d7b6f9694f963680ef5fd874a
-
Size
5.0MB
-
MD5
f1080ea8b41a7a08700294341a525201
-
SHA1
658fc63e5c04e9983131aca7cf4ec81443f7fdca
-
SHA256
c2bcec140f2d259d4dfee6d962b42a648561ea3d7b6f9694f963680ef5fd874a
-
SHA512
c1d9331ec61a187e7e485a778d46388a3e96f2a11a47f51ccca40b0bc99a878ee360b65a8cb12be9067e5e8a327b1c360055ca8cbe493b1433966da25d3ec6b7
-
SSDEEP
98304:ecGssbYuT6EFCQJb6bPFL9wMe5cfD+emfVQH3+/Ncgg/kmnOF1Xkw+mK7fONQ3jd:YbLFFCQgjFL9w9yD+DqO/NUkeOnk1mkP
Score10/10-
Detect Socks5Systemz Payload
-
Socks5Systemz
Socks5Systemz is a botnet written in C++.
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-