Extracted

• • Target
    ff2ea02efaaf323b5ed12c1d6cdbe9f5aa20ce0258d145979e0b032b346b7993.exe
  • Size 2.0MB
  • SHA256 ff2ea02efaaf323b5ed12c1d6cdbe9f5aa20ce0258d145979e0b032b346b7993
  • MD5 cad44180b92cac014fab6e1347c6de74
  • SHA1 0cce606a4978a6d10c2e5cb5e12920fc2cf58b0b
  • SHA512 19b6db98335d34cda5ce048fb8d487873c1fcd9edbe3678b645c1d990d100b9459fafb023c105f691e541097c21af881722cb4e68073e9cd61ad957f5cc836ef
  • SSDEEP 49152:32WzK9lzkmg9eZqxPy81q4QOtTjkrQtpz7IXM:mX9VkmOewxPumTjjcM
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2