Extracted

• • Target

    e13c6d0463f12f15ddcebedb8704d28ce6621fe775a88a739963c2189d5fc67b

  • Size

    7.4MB

  • MD5

    5a16c8dcc90fa2c9b614a4cc9811819a

  • SHA1

    7ab31ec54bb54603594fe3b32acd3adeef1f9708

  • SHA256

    e13c6d0463f12f15ddcebedb8704d28ce6621fe775a88a739963c2189d5fc67b

  • SHA512

    765f235297348ee0a8f4f2b002aa2c8d5e93ef21f7c4cf63819020f5e26c384889fa06d3a65b8a12746ab872282129720ed5cab738c851269906461709c37703

  • SSDEEP

    98304:IsJGinClmXF+U5g4EEi78IO/OyzEXkNv4j2+n8Qh+FSvMUUv55RZW4AuzY8ARu+q:DWqF/KhEq8IiZv4pn8Q8dZZ/ARlkH1

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2