Extracted

• • Target
    70954c38bf2bd7d8b250e99cd4fda9ca229ec45b11536acedbd1de638ae30da7
  • Size 2.2MB
  • SHA256 70954c38bf2bd7d8b250e99cd4fda9ca229ec45b11536acedbd1de638ae30da7
  • MD5 7e73912ed93da7fec76cf2dc5b02a619
  • SHA1 f41dab4f82d074ebb604c359f19ee17365bfebbf
  • SHA512 d94c839f4d7c296a7b55b03b4694a38261b86695afbac92a921894f044db75219100a6f5590b1704a8b13a3355afc1596f817131b625282a4fe004bf17f5d814
  • SSDEEP 49152:32qdexQWtsW8e1kD9XgbaF2TtOM9UlNQ8qQ1gVWWqjxPAI:mqdexRCe1kJgW2BOV75sqNPAI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2