Extracted

• • Target
    29f50a3dc9731730314cf4ca73b54ae941f8f4c54b301167e91ace21c7f2ed07
  • Size 2.2MB
  • SHA256 29f50a3dc9731730314cf4ca73b54ae941f8f4c54b301167e91ace21c7f2ed07
  • MD5 ecef0bee68bb08cb1742c9a9b68ad72e
  • SHA1 1fd4e5175719200f19f392ca159be9bf1f62d30e
  • SHA512 1ea880ee2e75cc474f41a0de560b68a5aac770f6700ecc52fbc6eb9e61981574df30f7164832c854921c912efe7ad4c262960225c3dc8e1c0b9d9bc5a50aec33
  • SSDEEP 24576:320SfWwGpXo40uZe6+8XkzExtSje9AZjewGwcdMJDE4GmM1Vy+Sr1PsW+tmQDtlU:32iwGpDLZ9xt2SLwctbSr1kNXySFI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2