General

  • Target

    5c8a9042e620e760de47c7932eecd635e661fe3354535c1baf2be0f653309606N

  • Size

    6.0MB

  • Sample

    241106-n4kj1aynet

  • MD5

    9246d6b00a357241b56a8840010386f0

  • SHA1

    8fbf982f46a9c177086a992db1e5c6e7f51672fc

  • SHA256

    5c8a9042e620e760de47c7932eecd635e661fe3354535c1baf2be0f653309606

  • SHA512

    549df80c98095b653f43bd25e93d716ead08585f23813ab060d8abc3a3fc32ec3c0df86301d4f9a2990a00d41d30646ca8b64996206ed42327053ddee61c2ea2

  • SSDEEP

    98304:QevlgUAJrZvDs+59UjmghBAzD6v5xVCeje5OgubMDS28nuldCHho993MmCJ494sL:X7A9BnranAn6RHjSTDS28uldCHhG9Wdk

Malware Config

Targets

    • Target

      5c8a9042e620e760de47c7932eecd635e661fe3354535c1baf2be0f653309606N

    • Size

      6.0MB

    • MD5

      9246d6b00a357241b56a8840010386f0

    • SHA1

      8fbf982f46a9c177086a992db1e5c6e7f51672fc

    • SHA256

      5c8a9042e620e760de47c7932eecd635e661fe3354535c1baf2be0f653309606

    • SHA512

      549df80c98095b653f43bd25e93d716ead08585f23813ab060d8abc3a3fc32ec3c0df86301d4f9a2990a00d41d30646ca8b64996206ed42327053ddee61c2ea2

    • SSDEEP

      98304:QevlgUAJrZvDs+59UjmghBAzD6v5xVCeje5OgubMDS28nuldCHho993MmCJ494sL:X7A9BnranAn6RHjSTDS28uldCHhG9Wdk

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Socks5systemz family

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks