General

  • Target

    acca78141dda7bf1e5ddfbe59205aeaff2709bd4647f173c0cfdd9defad7ed33

  • Size

    5.8MB

  • Sample

    241107-1pkmnsylb1

  • MD5

    a67787ccfe25160405bc0ab5d4500991

  • SHA1

    e6e36e72aec5d78f338a7b930da15f0653d422a4

  • SHA256

    acca78141dda7bf1e5ddfbe59205aeaff2709bd4647f173c0cfdd9defad7ed33

  • SHA512

    45418742319bdb05522f2803c993a5c5ec4f411930f8c191e5c8bfb370bb5880f4ac46dc47dbdb6d6570e6241adece8d35a41ba6482d764e328c156f4e9edd20

  • SSDEEP

    98304:4Lcqx9HgHcCqmAmticT3WlkXELOP7+B4mDD6vIHYMiuyj8hT0gux5nldeWWO:AcvcCqyicDXEgyBTP6vIzFwgux5Pl

Malware Config

Targets

    • Target

      acca78141dda7bf1e5ddfbe59205aeaff2709bd4647f173c0cfdd9defad7ed33

    • Size

      5.8MB

    • MD5

      a67787ccfe25160405bc0ab5d4500991

    • SHA1

      e6e36e72aec5d78f338a7b930da15f0653d422a4

    • SHA256

      acca78141dda7bf1e5ddfbe59205aeaff2709bd4647f173c0cfdd9defad7ed33

    • SHA512

      45418742319bdb05522f2803c993a5c5ec4f411930f8c191e5c8bfb370bb5880f4ac46dc47dbdb6d6570e6241adece8d35a41ba6482d764e328c156f4e9edd20

    • SSDEEP

      98304:4Lcqx9HgHcCqmAmticT3WlkXELOP7+B4mDD6vIHYMiuyj8hT0gux5nldeWWO:AcvcCqyicDXEgyBTP6vIzFwgux5Pl

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Socks5systemz family

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks