Extracted

• • Target
    file.exe
  • Size 2.1MB
  • SHA256 c80fb1e76c7f1cce2e034f9683bddc039a5bf7553b78b61a48a228db98bd6a07
  • MD5 984bc2939cd70abb34704d04dc2d072d
  • SHA1 63bbce6e8d35af33bb93a9a0e147f118b8a159ba
  • SHA512 dd3d38c04110f5a900610f30e34eb9dc2476b0f1d2cdba05a17575c721fe542c0ac665e63fa1a80485252053dcd88ef65e0aeb49b4d5458138ee9920586656d2
  • SSDEEP 49152:32593b2jFVyxFD1QOcG/NirpfoLClJ5zFqIT+RzBaKT:maiQpG/NWpfoLCb5z4IT+Xak
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2