Overview

overview

10

Static

static

3

344ed7841a...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    344ed7841ae17ad0d54c844e13cb5f65.exe

  • Size

    3.5MB

  • Sample

    250411-hek7casj12

  • MD5

    344ed7841ae17ad0d54c844e13cb5f65

  • SHA1

    056948fba0ee26a6774e19edc637e9447ed9a1b0

  • SHA256

    372b81311186c476741ad97006e8e50533e7541d16a7188ae00139c26e321c35

  • SHA512

    aeb11a7b4f500f8337c46cae5777297268e0d7ba66296e14b20b43f0edfc70e9bd39604cc10da71cca44dc9d67e3c47f3c9c675fed8de2014fc114708f744e77

  • SSDEEP

    98304:NJ+a1qZVIAis6zBkjcfKQTuauUhyij80JxhMoXdkjtVok5:n+gq79f6acluqjnJxh/ejtVok5

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      344ed7841ae17ad0d54c844e13cb5f65.exe

    • Size

      3.5MB

    • MD5

      344ed7841ae17ad0d54c844e13cb5f65

    • SHA1

      056948fba0ee26a6774e19edc637e9447ed9a1b0

    • SHA256

      372b81311186c476741ad97006e8e50533e7541d16a7188ae00139c26e321c35

    • SHA512

      aeb11a7b4f500f8337c46cae5777297268e0d7ba66296e14b20b43f0edfc70e9bd39604cc10da71cca44dc9d67e3c47f3c9c675fed8de2014fc114708f744e77

    • SSDEEP

      98304:NJ+a1qZVIAis6zBkjcfKQTuauUhyij80JxhMoXdkjtVok5:n+gq79f6acluqjnJxh/ejtVok5

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks