Extracted

• • Target
    abbfeafd37800ddd1e606cef5844f414e277b73963a3464c6c2bca908bf8c5f4
  • Size 2.1MB
  • SHA256 abbfeafd37800ddd1e606cef5844f414e277b73963a3464c6c2bca908bf8c5f4
  • MD5 419309f08dd524628f899d01ea6b05ee
  • SHA1 bc1c726f1d97fa16cde3949c864c9f41fc3da35e
  • SHA512 e5c3c1c0e33dd219a269cbb00c7ebf558e8cd2d83dbaf373730fd8e7857a24765b56b8582068555304719547b430583f61af2ac9cf190d272f7a3543d46cb523
  • SSDEEP 49152:32JBxsaWJV8TilVNwQSfkVM3o/tEm+nSX5iZyTyN54BTgyQjB:mrxsE+wpMV7t7+nSX5ByNyK5jB
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2