Overview

overview

10

Static

static

3

8dc08f6b4e...ae.exe

windows7-x64

10

8dc08f6b4e...ae.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8dc08f6b4e5ef0c645d5d2715570245dec0ead9e8901a5a53628bc87af8d4cae

  • Size

    3.9MB

  • Sample

    241126-f293wasrfq

  • MD5

    982b28b7a4ddf710c387bc1de86012fa

  • SHA1

    cd16c3b0023aba3b81f76e62f3538a626b853e3f

  • SHA256

    8dc08f6b4e5ef0c645d5d2715570245dec0ead9e8901a5a53628bc87af8d4cae

  • SHA512

    f6ef7da09d2ea6c70a1be8bdcec4e18b7d87b9e0b4ec7f4c84aa26a3afdc140600c86a700b5a2ecedd7bfe1cd446222cbbbf2840e6737012d1d0f09be45f4f49

  • SSDEEP

    98304:Nze4FaRxLWxw6lYS0KS+g2QNDUoTPzfKmVnW1CDQ1:5eTRwxw6lqKvzQNhz9VnvDU

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      8dc08f6b4e5ef0c645d5d2715570245dec0ead9e8901a5a53628bc87af8d4cae

    • Size

      3.9MB

    • MD5

      982b28b7a4ddf710c387bc1de86012fa

    • SHA1

      cd16c3b0023aba3b81f76e62f3538a626b853e3f

    • SHA256

      8dc08f6b4e5ef0c645d5d2715570245dec0ead9e8901a5a53628bc87af8d4cae

    • SHA512

      f6ef7da09d2ea6c70a1be8bdcec4e18b7d87b9e0b4ec7f4c84aa26a3afdc140600c86a700b5a2ecedd7bfe1cd446222cbbbf2840e6737012d1d0f09be45f4f49

    • SSDEEP

      98304:Nze4FaRxLWxw6lYS0KS+g2QNDUoTPzfKmVnW1CDQ1:5eTRwxw6lqKvzQNhz9VnvDU

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks