General

  • Target

    545160402919f25ad903f04124a325695527a66168fdf8094b554554126b1151N

  • Size

    5.9MB

  • Sample

    241110-t9tmrazpas

  • MD5

    8a7bb92c029592c20a43dfe8b2765730

  • SHA1

    5a43077baa53dbecc23170e69ae32a547299d8ab

  • SHA256

    545160402919f25ad903f04124a325695527a66168fdf8094b554554126b1151

  • SHA512

    3c89532801e9b06e4203f49128718720fb309601839d133eccc921f7b2a934425b23aefb7194d4560dedd1ff955d5db7720798483d295dcc1340a7ece6310fae

  • SSDEEP

    98304:44vRPrY8ct5HRMMvE5lbJ2+le2CZien2w0emgsG9ZvN33AKSl:vr7QHRQjQPQVgsIFq

Malware Config

Targets

    • Target

      545160402919f25ad903f04124a325695527a66168fdf8094b554554126b1151N

    • Size

      5.9MB

    • MD5

      8a7bb92c029592c20a43dfe8b2765730

    • SHA1

      5a43077baa53dbecc23170e69ae32a547299d8ab

    • SHA256

      545160402919f25ad903f04124a325695527a66168fdf8094b554554126b1151

    • SHA512

      3c89532801e9b06e4203f49128718720fb309601839d133eccc921f7b2a934425b23aefb7194d4560dedd1ff955d5db7720798483d295dcc1340a7ece6310fae

    • SSDEEP

      98304:44vRPrY8ct5HRMMvE5lbJ2+le2CZien2w0emgsG9ZvN33AKSl:vr7QHRQjQPQVgsIFq

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

    • Socks5systemz family

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks