Overview

overview

10

Static

static

3

ef2b651c73...52.exe

windows7-x64

10

ef2b651c73...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef2b651c73c3b03f06ae37161afb712b0cdccf77e63de01b39f2eda0fbccea52.exe

  • Size

    3.6MB

  • Sample

    241127-gfd9razpft

  • MD5

    1dbed06b2dc7b1a8e3e4abc686865a8a

  • SHA1

    ee1e04994c631aa9aec40e8d6a2b2913043a7469

  • SHA256

    ef2b651c73c3b03f06ae37161afb712b0cdccf77e63de01b39f2eda0fbccea52

  • SHA512

    8f1565560f45392c393ed07385b10b6b5a6affa448b42164511a34b0086fc965c4cbba3d3c7e7524866d574337c59944638064338865949645988ae1aeb81c95

  • SSDEEP

    98304:NZcaYHKos9yR8vDrp+0U5TpH/JSSsVKNPxw:75YHw9yK/p+pTpH7nw

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      ef2b651c73c3b03f06ae37161afb712b0cdccf77e63de01b39f2eda0fbccea52.exe

    • Size

      3.6MB

    • MD5

      1dbed06b2dc7b1a8e3e4abc686865a8a

    • SHA1

      ee1e04994c631aa9aec40e8d6a2b2913043a7469

    • SHA256

      ef2b651c73c3b03f06ae37161afb712b0cdccf77e63de01b39f2eda0fbccea52

    • SHA512

      8f1565560f45392c393ed07385b10b6b5a6affa448b42164511a34b0086fc965c4cbba3d3c7e7524866d574337c59944638064338865949645988ae1aeb81c95

    • SSDEEP

      98304:NZcaYHKos9yR8vDrp+0U5TpH/JSSsVKNPxw:75YHw9yK/p+pTpH7nw

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks