General
- Target e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
- Size 2.1MB
- Sample240324-v6mkpseb47
- SHA256 e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
Score
10/10
Malware Config
Targets
-
- Target e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
- Size 2.1MB
- SHA256 e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
Score10/10-
Detect Socks5Systemz Payload
-
Socks5Systemz
Socks5Systemz is a botnet written in C++.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.