Extracted

• • Target
    4b9bf98619005e04692a0b056f348da51972f5fea76b3cee19c44e2aeecafe44
  • Size 2.0MB
  • SHA256 4b9bf98619005e04692a0b056f348da51972f5fea76b3cee19c44e2aeecafe44
  • MD5 797b4dcfe35b6ceba8693583a1da3493
  • SHA1 2050f18136a28a137579817bd8562e163b6a9a0d
  • SHA512 355f423838f05cb0a3ba258c188d855a5a9deee57ed104ce45c6e22fa0dff4c25c629ebec76faadf5b5759f74f4d8d10c06aedacdaa38a914c8f2f3be9de3471
  • SSDEEP 24576:320/DpA0Se/oY+2SLCCvcmPlPnVByYhf2O13MNc90PlI8/GgtyvNSpR3T4F8k9Bg:32ypA0FwJgsRVYY9c8IH30FZBEBixyB
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2