Overview

overview

10

Static

static

3

394d50a4cb...dN.exe

windows7-x64

10

394d50a4cb...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    394d50a4cb77ec4106dee626358fb4a32005c16f2e4ec9e3754cf81380b8337dN

  • Size

    6.0MB

  • Sample

    241110-wc4ska1mbt

  • MD5

    d380fa3b16c35c05779eb429063b1950

  • SHA1

    f1adb292b0477bb5e2e3028bdf4cf2677c013a1c

  • SHA256

    394d50a4cb77ec4106dee626358fb4a32005c16f2e4ec9e3754cf81380b8337d

  • SHA512

    0ebc8a053ab5703cfa14a4a5ae26723d7da238dae3b2fe878c31c6a4c6c53b32a92056ede05380f83ae4dc12adad46ce541e24d3f64f37c24529d76957e7a88d

  • SSDEEP

    98304:4Zxi1MVJEXniZsTb214JbNw+yiB2+dKlpqoxS2AXesa7cKTUld3TQXtu3a0l:k4+rESZcC1spVyihdRox52XawKYldDt/

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      394d50a4cb77ec4106dee626358fb4a32005c16f2e4ec9e3754cf81380b8337dN

    • Size

      6.0MB

    • MD5

      d380fa3b16c35c05779eb429063b1950

    • SHA1

      f1adb292b0477bb5e2e3028bdf4cf2677c013a1c

    • SHA256

      394d50a4cb77ec4106dee626358fb4a32005c16f2e4ec9e3754cf81380b8337d

    • SHA512

      0ebc8a053ab5703cfa14a4a5ae26723d7da238dae3b2fe878c31c6a4c6c53b32a92056ede05380f83ae4dc12adad46ce541e24d3f64f37c24529d76957e7a88d

    • SSDEEP

      98304:4Zxi1MVJEXniZsTb214JbNw+yiB2+dKlpqoxS2AXesa7cKTUld3TQXtu3a0l:k4+rESZcC1spVyihdRox52XawKYldDt/

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks