Overview

overview

10

Static

static

3

b759fc02cf...9f.exe

windows7-x64

10

b759fc02cf...9f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b759fc02cfe5a95fbd8e1eced48af208a4fadbd1b3cda8288027ea1bcdecda9f

  • Size

    3.4MB

  • Sample

    241127-t1ykcaxnaq

  • MD5

    d582cc0503c349cac4c8a33bc1bf0f56

  • SHA1

    b5d437413f882adf5f25a0ebe688db6aae7f92fd

  • SHA256

    b759fc02cfe5a95fbd8e1eced48af208a4fadbd1b3cda8288027ea1bcdecda9f

  • SHA512

    174d307bffd42fa3fb7a86be764b9618df06e30f97b18597c81c33437369da71c15d964f7b9f9fe8c027ee48c1f90f464558e2b1eceac07329dca1c18ac92ef5

  • SSDEEP

    98304:N4OQ92CdH6TTEs1ULCAtt/zBXgi3kodghs:WvupQCibvMs

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      b759fc02cfe5a95fbd8e1eced48af208a4fadbd1b3cda8288027ea1bcdecda9f

    • Size

      3.4MB

    • MD5

      d582cc0503c349cac4c8a33bc1bf0f56

    • SHA1

      b5d437413f882adf5f25a0ebe688db6aae7f92fd

    • SHA256

      b759fc02cfe5a95fbd8e1eced48af208a4fadbd1b3cda8288027ea1bcdecda9f

    • SHA512

      174d307bffd42fa3fb7a86be764b9618df06e30f97b18597c81c33437369da71c15d964f7b9f9fe8c027ee48c1f90f464558e2b1eceac07329dca1c18ac92ef5

    • SSDEEP

      98304:N4OQ92CdH6TTEs1ULCAtt/zBXgi3kodghs:WvupQCibvMs

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks