Overview

overview

10

Static

static

3

d8f3ea2acc...eN.exe

windows7-x64

10

d8f3ea2acc...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8f3ea2acc1ac0b2f90d1f239430ad80ea9446ab405843a943856f5d205485feN

  • Size

    5.4MB

  • Sample

    241106-xgrjgawdqq

  • MD5

    d92e3df3bd004ea9aaddbdbf2755a640

  • SHA1

    7871276baebb1de975fb2b0def9b0b1bf3c21e11

  • SHA256

    d8f3ea2acc1ac0b2f90d1f239430ad80ea9446ab405843a943856f5d205485fe

  • SHA512

    ca399b015d3b6864582c85b2e4650660054950f7b1aa5e5aebcdbad8f52639f36386d21a940615cc3859b875f13da07bf963a9bae667d1bc63ffcc026ff7436e

  • SSDEEP

    98304:QNlppnxDTzbPwbHtN0tGN/jE6rvUDsyQ9mFYkRPp18cHKxokqGSoR42a:8lrxnCHtWGN/42MDRQMWEPHSgGq

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      d8f3ea2acc1ac0b2f90d1f239430ad80ea9446ab405843a943856f5d205485feN

    • Size

      5.4MB

    • MD5

      d92e3df3bd004ea9aaddbdbf2755a640

    • SHA1

      7871276baebb1de975fb2b0def9b0b1bf3c21e11

    • SHA256

      d8f3ea2acc1ac0b2f90d1f239430ad80ea9446ab405843a943856f5d205485fe

    • SHA512

      ca399b015d3b6864582c85b2e4650660054950f7b1aa5e5aebcdbad8f52639f36386d21a940615cc3859b875f13da07bf963a9bae667d1bc63ffcc026ff7436e

    • SSDEEP

      98304:QNlppnxDTzbPwbHtN0tGN/jE6rvUDsyQ9mFYkRPp18cHKxokqGSoR42a:8lrxnCHtWGN/42MDRQMWEPHSgGq

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks