Overview

overview

10

Static

static

3

113106967e...e8.exe

windows7-x64

10

113106967e...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    113106967e66077d88c8cf6dae8170d74479b3c4f7a2fc284719eb39cef28ce8.exe

  • Size

    6.9MB

  • Sample

    241215-cgy84a1lbv

  • MD5

    3ec3e60970e2d0d38df3b5e571e8514d

  • SHA1

    e2c9975f6fda0cbbfaa434e25b6645450cb926ea

  • SHA256

    113106967e66077d88c8cf6dae8170d74479b3c4f7a2fc284719eb39cef28ce8

  • SHA512

    55df7ef052fc553de96dc5b83cc3d36388ef653dad3471ed007febd851b692c4528a3fd3c4da0dbdd483fa1d292b80deb867f1e6e2ce21878bd1701d845847a3

  • SSDEEP

    196608:FxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:7NztzQlcDPXus98d9Jzj

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      113106967e66077d88c8cf6dae8170d74479b3c4f7a2fc284719eb39cef28ce8.exe

    • Size

      6.9MB

    • MD5

      3ec3e60970e2d0d38df3b5e571e8514d

    • SHA1

      e2c9975f6fda0cbbfaa434e25b6645450cb926ea

    • SHA256

      113106967e66077d88c8cf6dae8170d74479b3c4f7a2fc284719eb39cef28ce8

    • SHA512

      55df7ef052fc553de96dc5b83cc3d36388ef653dad3471ed007febd851b692c4528a3fd3c4da0dbdd483fa1d292b80deb867f1e6e2ce21878bd1701d845847a3

    • SSDEEP

      196608:FxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:7NztzQlcDPXus98d9Jzj

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks