Extracted

• • Target
    b004cdd254054b6cc1f80edcedb17c05721e9f529d3c46d4d1f0ce02570b60a9.exe
  • Size 2.0MB
  • SHA256 b004cdd254054b6cc1f80edcedb17c05721e9f529d3c46d4d1f0ce02570b60a9
  • MD5 a7cb46b956da911a14fe793e70b7e777
  • SHA1 221f4521aaca55011f051b00e2f53bb753e5da59
  • SHA512 96e4f435fd6855f269e74751b0fcb54a281df58cbf193fc643490f163574df71fb73e5e96f62b2b5a66b69bbed2bf83698817bbccc2fae682505238eebb91c24
  • SSDEEP 49152:32YZ1XHtJLAoIxD2jE5ewh2bUBZ0PzqAkqoq0W+z5:mYvXfMdv2AcqaoI+9
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Detects executables packed with VMProtect.

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2