General
-
Target
8b85d7c2e419cbff4101f5ee8a52302db887f7195cbbea71d0791f9e2719b49a
-
Size
3.4MB
-
Sample
241125-l2k2msxmbq
-
MD5
323e81f636d99db9bb388c209dafd867
-
SHA1
5bb6cb2979519c807c1fd398a7e65349df3c026e
-
SHA256
8b85d7c2e419cbff4101f5ee8a52302db887f7195cbbea71d0791f9e2719b49a
-
SHA512
88d0669226791520dc99f3a79d94df31f5b67483c596221df5590eea4708a282c8a3933b2ac8f9808f39b01f0733d150a189dd499ad128774cde5f768fdeccc6
-
SSDEEP
49152:1vX6/EVByh6cndQZJ+sXEhka3NFo5JdkfsZee687ABv2U3yTBDoSnaD6C:NX6/Uy0cnUuNFi6fEee6EAB2TTWSaD6C
Malware Config
Targets
-
-
Target
8b85d7c2e419cbff4101f5ee8a52302db887f7195cbbea71d0791f9e2719b49a
-
Size
3.4MB
-
MD5
323e81f636d99db9bb388c209dafd867
-
SHA1
5bb6cb2979519c807c1fd398a7e65349df3c026e
-
SHA256
8b85d7c2e419cbff4101f5ee8a52302db887f7195cbbea71d0791f9e2719b49a
-
SHA512
88d0669226791520dc99f3a79d94df31f5b67483c596221df5590eea4708a282c8a3933b2ac8f9808f39b01f0733d150a189dd499ad128774cde5f768fdeccc6
-
SSDEEP
49152:1vX6/EVByh6cndQZJ+sXEhka3NFo5JdkfsZee687ABv2U3yTBDoSnaD6C:NX6/Uy0cnUuNFi6fEee6EAB2TTWSaD6C
Score10/10-
Detect Socks5Systemz Payload
-
Socks5Systemz
Socks5Systemz is a botnet written in C++.
-
Socks5systemz family
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-