Overview

overview

10

Static

static

3

1573bea93f...7N.exe

windows7-x64

10

1573bea93f...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1573bea93f2317dbf01fadfe7ff31d8c35a0cb7a6c0ebd6e21b24ecf8bd64b77N.exe

  • Size

    3.9MB

  • Sample

    241201-tsn1yazqcj

  • MD5

    4ca27b673fddb95ae6c063b5071f86f0

  • SHA1

    c2f2ab39df11d6a15c5825a526480b253fbbc357

  • SHA256

    1573bea93f2317dbf01fadfe7ff31d8c35a0cb7a6c0ebd6e21b24ecf8bd64b77

  • SHA512

    8efcfaa5ccf5368c16cff5269b2013c2963c34f7c99aa7fc6609e82865cc88a8a55924736d45036836fa0e3e4a1b8997dbcd58d0eec44d86e337cc43cd9dee06

  • SSDEEP

    98304:NhrOSEBFC40hICa+poD+Ch2/zzKGqLCcWfBfBG7XQ9iW5F:/CrCxa+dCh27zKGqEBG7XoXF

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      1573bea93f2317dbf01fadfe7ff31d8c35a0cb7a6c0ebd6e21b24ecf8bd64b77N.exe

    • Size

      3.9MB

    • MD5

      4ca27b673fddb95ae6c063b5071f86f0

    • SHA1

      c2f2ab39df11d6a15c5825a526480b253fbbc357

    • SHA256

      1573bea93f2317dbf01fadfe7ff31d8c35a0cb7a6c0ebd6e21b24ecf8bd64b77

    • SHA512

      8efcfaa5ccf5368c16cff5269b2013c2963c34f7c99aa7fc6609e82865cc88a8a55924736d45036836fa0e3e4a1b8997dbcd58d0eec44d86e337cc43cd9dee06

    • SSDEEP

      98304:NhrOSEBFC40hICa+poD+Ch2/zzKGqLCcWfBfBG7XQ9iW5F:/CrCxa+dCh27zKGqEBG7XoXF

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks