Extracted

• • Target

    9b7f88c13f8a1eaaa385ac68db0ffa92af67d14e2a47dc3986841bfb92fe8d17

  • Size

    7.5MB

  • MD5

    cd5a9e558d4ef9182fa32921dc35528e

  • SHA1

    59edc7e62cace7b56a9354265f93f0ad64af87a8

  • SHA256

    9b7f88c13f8a1eaaa385ac68db0ffa92af67d14e2a47dc3986841bfb92fe8d17

  • SHA512

    1f16ec1bca5d12fbb1386ef33b754fd0c8010511e4299d8720d6207162e6ba1cce44aac3f7456e413de151ef42a7fa5a1530baa2d744ca37029c5b4233ef757f

  • SSDEEP

    196608:oF1x6W08PiP1WgaGXz6UoxIYLvmDijw+SQ0i6btJ6el5HfI7sWV4:oFLjPiP1BnjwaYLvmeUbQSbt5l5/IJi

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2