socks5systemz | c09ada51aa55b7020d780bf333f08018b33a59bcd3a08ad6f0eaffd45bf75197 | Triage

Submit
Reports

Overview

overview

Static

static

3

c09ada51aa...7N.exe

windows7-x64

c09ada51aa...7N.exe

windows10-2004-x64

Sharing

General

Target

c09ada51aa55b7020d780bf333f08018b33a59bcd3a08ad6f0eaffd45bf75197N
Size

5.9MB
Sample

241110-bamfaavpay
MD5

d612fe774a03a9ac300a876879c7b600
SHA1

3dcecec9371bd5c78d0dcb6c9df8b9bc79215b44
SHA256

c09ada51aa55b7020d780bf333f08018b33a59bcd3a08ad6f0eaffd45bf75197
SHA512

8bc61d5df33b643bdd8702ef5f98a3997a1facec3c6de858d38052f5b59ba4a950ba5bfb3205540a7195b18cf46e20d7a606b700600774e25e2099a5a229aeed
SSDEEP

98304:4HAfRSJ3cTIDl+jiU2ensD97dRYkTprRnVKTR0K7PiuSYyhiXQNkuC/YF6pq5F8l:WA5wOI7esDLWkTpyTR0K7quSY5XQuu6B

Score

10^/10

socks5systemz botnet discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c09ada51aa55b7020d780bf333f08018b33a59bcd3a08ad6f0eaffd45bf75197N.exe

Resource

win7-20240708-en

socks5systemz botnet discovery

windows7-x64

11 signatures

120 seconds

Behavioral task

behavioral2

Sample

c09ada51aa55b7020d780bf333f08018b33a59bcd3a08ad6f0eaffd45bf75197N.exe

Resource

win10v2004-20241007-en

socks5systemz botnet discovery

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  c09ada51aa55b7020d780bf333f08018b33a59bcd3a08ad6f0eaffd45bf75197N
- Size
  
  5.9MB
- MD5
  
  d612fe774a03a9ac300a876879c7b600
- SHA1
  
  3dcecec9371bd5c78d0dcb6c9df8b9bc79215b44
- SHA256
  
  c09ada51aa55b7020d780bf333f08018b33a59bcd3a08ad6f0eaffd45bf75197
- SHA512
  
  8bc61d5df33b643bdd8702ef5f98a3997a1facec3c6de858d38052f5b59ba4a950ba5bfb3205540a7195b18cf46e20d7a606b700600774e25e2099a5a229aeed
- SSDEEP
  
  98304:4HAfRSJ3cTIDl+jiU2ensD97dRYkTprRnVKTR0K7PiuSYyhiXQNkuC/YF6pq5F8l:WA5wOI7esDLWkTpyTR0K7quSY5XQuu6B
Score

10^/10

socks5systemz botnet discovery
- Detect Socks5Systemz Payload
- Socks5Systemz
  Socks5Systemz is a botnet written in C++.
  botnet socks5systemz
- Socks5systemz family
  socks5systemz
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socks5systemzbotnetdiscovery

behavioral2

socks5systemzbotnetdiscovery

© 2018-2025

Terms | Privacy