Overview

overview

10

Static

static

3

458c9a7d70...6N.exe

windows7-x64

10

458c9a7d70...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    458c9a7d70aef5cb6d6824ac32b89ffb8e0a30a5d90c8ca6ffd631e990ac76f6N.exe

  • Size

    3.5MB

  • Sample

    241206-bjzf7sska1

  • MD5

    38021802fa10bf10a65680754d299fa0

  • SHA1

    f4a22726de25b67a7f3391b1c985d1d3f54b0c09

  • SHA256

    458c9a7d70aef5cb6d6824ac32b89ffb8e0a30a5d90c8ca6ffd631e990ac76f6

  • SHA512

    bbea1c0b4fc11307b2599730b76a5fe598e4f05f95bcefcb00fbc3aec9c254abea272d0f09890bae3d4738af28a2b0c2fe34c55e9f5b8164c851b48788daf0a0

  • SSDEEP

    98304:Nn5fMyVZ8DwhIAb1x94Zc0rNo+hV690eqdpWwLSpublC:fn8Uh7b1x9EDZLV6yK

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      458c9a7d70aef5cb6d6824ac32b89ffb8e0a30a5d90c8ca6ffd631e990ac76f6N.exe

    • Size

      3.5MB

    • MD5

      38021802fa10bf10a65680754d299fa0

    • SHA1

      f4a22726de25b67a7f3391b1c985d1d3f54b0c09

    • SHA256

      458c9a7d70aef5cb6d6824ac32b89ffb8e0a30a5d90c8ca6ffd631e990ac76f6

    • SHA512

      bbea1c0b4fc11307b2599730b76a5fe598e4f05f95bcefcb00fbc3aec9c254abea272d0f09890bae3d4738af28a2b0c2fe34c55e9f5b8164c851b48788daf0a0

    • SSDEEP

      98304:Nn5fMyVZ8DwhIAb1x94Zc0rNo+hV690eqdpWwLSpublC:fn8Uh7b1x9EDZLV6yK

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks