Overview

overview

10

Static

static

3

fb60b8e0df...f6.exe

windows10-2004-x64

10

fb60b8e0df...f6.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb60b8e0dfa48c25dda7a9b1bb55bff6.exe

  • Size

    3.7MB

  • Sample

    250417-gem59ssr12

  • MD5

    fb60b8e0dfa48c25dda7a9b1bb55bff6

  • SHA1

    e16e205591973df664dae61cb92845b6e27a2599

  • SHA256

    6f420842274a1f21505a6547551fe6021007b22f69e60556dfa8e9657a536e7f

  • SHA512

    144087304f3832ab1a4b118bdeddc05b5e97b355e8ce905609847052da1aa42b5e39ef5ad7d666ce80d0c125328028c7a2d89a37151879c2284a7bfb88cc76a9

  • SSDEEP

    98304:NEgc0L2vDz3Zvb2jatfAzeSmSTuzY2SK5vsY9xlcY10rJkk:yg92v3NbyatfAzeSmycL/VnlcCoJp

Score
10/10
socks5systemzbotnetdiscovery

Malware Config

Targets

    • Target

      fb60b8e0dfa48c25dda7a9b1bb55bff6.exe

    • Size

      3.7MB

    • MD5

      fb60b8e0dfa48c25dda7a9b1bb55bff6

    • SHA1

      e16e205591973df664dae61cb92845b6e27a2599

    • SHA256

      6f420842274a1f21505a6547551fe6021007b22f69e60556dfa8e9657a536e7f

    • SHA512

      144087304f3832ab1a4b118bdeddc05b5e97b355e8ce905609847052da1aa42b5e39ef5ad7d666ce80d0c125328028c7a2d89a37151879c2284a7bfb88cc76a9

    • SSDEEP

      98304:NEgc0L2vDz3Zvb2jatfAzeSmSTuzY2SK5vsY9xlcY10rJkk:yg92v3NbyatfAzeSmycL/VnlcCoJp

    Score
    10/10
    socks5systemzbotnetdiscovery

    • Detect Socks5Systemz Payload

    • Socks5Systemz

      Socks5Systemz is a botnet written in C++.

      botnetsocks5systemz

    • Socks5systemz family

      socks5systemz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks