socks5systemz | 33d3cda0c4ce72be41fbf753384b19df31f2af57409636e251cd75fe166a07eb | Triage

Submit
Reports

Overview

overview

Static

static

3

33d3cda0c4...bN.exe

windows7-x64

33d3cda0c4...bN.exe

windows10-2004-x64

Sharing

General

Target

33d3cda0c4ce72be41fbf753384b19df31f2af57409636e251cd75fe166a07ebN
Size

6.1MB
Sample

241108-b5fwzsvmer
MD5

df3206e9cbdbbaa04d5ed6b8bb8051a0
SHA1

081119f445457a3d33e31b509785830edcf78bb8
SHA256

33d3cda0c4ce72be41fbf753384b19df31f2af57409636e251cd75fe166a07eb
SHA512

6ef8009d3e02eeb403dee11be8d8d5a1c3fb1bfe8fe3a0118b80e51c036a3dd6f15c405d62593168e22142f313a5c4f8be115568f360bc51ff17483b5c9fbdfe
SSDEEP

196608:4J9E2Whrrudk5Yo6ymB7KcX0wMopsccW6d:c97UrWk5KyIPkYpsc2

Score

10^/10

socks5systemz botnet discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

33d3cda0c4ce72be41fbf753384b19df31f2af57409636e251cd75fe166a07ebN.exe

Resource

win7-20241010-en

socks5systemz botnet discovery

windows7-x64

9 signatures

120 seconds

Behavioral task

behavioral2

Sample

33d3cda0c4ce72be41fbf753384b19df31f2af57409636e251cd75fe166a07ebN.exe

Resource

win10v2004-20241007-en

socks5systemz botnet discovery

windows10-2004-x64

9 signatures

120 seconds

Malware Config

Targets

- Target
  
  33d3cda0c4ce72be41fbf753384b19df31f2af57409636e251cd75fe166a07ebN
- Size
  
  6.1MB
- MD5
  
  df3206e9cbdbbaa04d5ed6b8bb8051a0
- SHA1
  
  081119f445457a3d33e31b509785830edcf78bb8
- SHA256
  
  33d3cda0c4ce72be41fbf753384b19df31f2af57409636e251cd75fe166a07eb
- SHA512
  
  6ef8009d3e02eeb403dee11be8d8d5a1c3fb1bfe8fe3a0118b80e51c036a3dd6f15c405d62593168e22142f313a5c4f8be115568f360bc51ff17483b5c9fbdfe
- SSDEEP
  
  196608:4J9E2Whrrudk5Yo6ymB7KcX0wMopsccW6d:c97UrWk5KyIPkYpsc2
Score

10^/10

socks5systemz botnet discovery
- Detect Socks5Systemz Payload
- Socks5Systemz
  Socks5Systemz is a botnet written in C++.
  botnet socks5systemz
- Socks5systemz family
  socks5systemz
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socks5systemzbotnetdiscovery

behavioral2

socks5systemzbotnetdiscovery

© 2018-2024

Terms | Privacy