Overview

overview

10

Static

static

3

76435e8885...70.exe

windows10-2004-x64

10

76435e8885...70.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76435e8885559a7c3ef955de05646970.exe

  • Size

    3.5MB

  • Sample

    250416-swdhyasxds

  • MD5

    76435e8885559a7c3ef955de05646970

  • SHA1

    9a897889383e55a66c215bbc2b341996a46081b0

  • SHA256

    635fac03fcdd04822beb4740cdd544d887cd3039b67009cc90bdacc6c4bcdacb

  • SHA512

    713b27c8c593e9f3a02e9b7e183ae0dd6e8b0e44a23b7214e86f2dc91eae60c8c9134e544f076ca12c1fe33ca6057bccd97d019ae840e070839711117a18cc72

  • SSDEEP

    49152:1vzosUaPvpjU0FGpOWYALJs7RjYt/brea7XNB3oYxU3uhdSc1ME9XoMYvmVlWRh:NzVP20wpOWS7cbreyLh6KD1MCXdY+jWf

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      76435e8885559a7c3ef955de05646970.exe

    • Size

      3.5MB

    • MD5

      76435e8885559a7c3ef955de05646970

    • SHA1

      9a897889383e55a66c215bbc2b341996a46081b0

    • SHA256

      635fac03fcdd04822beb4740cdd544d887cd3039b67009cc90bdacc6c4bcdacb

    • SHA512

      713b27c8c593e9f3a02e9b7e183ae0dd6e8b0e44a23b7214e86f2dc91eae60c8c9134e544f076ca12c1fe33ca6057bccd97d019ae840e070839711117a18cc72

    • SSDEEP

      49152:1vzosUaPvpjU0FGpOWYALJs7RjYt/brea7XNB3oYxU3uhdSc1ME9XoMYvmVlWRh:NzVP20wpOWS7cbreyLh6KD1MCXdY+jWf

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks