Extracted

• • Target
    88afdda7723f2a3f4c5b36a5b3884514.exe
  • Size 2.0MB
  • SHA256 5066ac412c958ec0cc10a69dd658dcd6d1ddfa484f2810aed7d9d69d075992a4
  • MD5 88afdda7723f2a3f4c5b36a5b3884514
  • SHA1 2ec6d8c2cc9a5501e95b6112111420f0d952c6bf
  • SHA512 891b3a2506016a6e277109f0245a0c7f75dd5011e5e033470ea92c013c436607a02c5c08a7181292d9730cff5cfd7c552c897228e9cfd4083e8e142c7fbb2415
  • SSDEEP 49152:325aqTNpyDf2C4JE8KiUhNc00/nTWD97phmsxPzsDUYJ:mcy+Iq8yuxvTWNXbsQYJ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2