Extracted

• • Target

    d425def79a4f18a2b73607fa17930e49e425eed6c087a9e39091769ac86ebd1e

  • Size

    2.2MB

  • MD5

    89619004c54640d5671ecbee6fe9481e

  • SHA1

    2b1b6ec6e0f60d8699c4398ed43fb586c037470a

  • SHA256

    d425def79a4f18a2b73607fa17930e49e425eed6c087a9e39091769ac86ebd1e

  • SHA512

    74fd4401b3ce586ab84b7672c13a2113c9aa45a593401a0176defeb28d47b8c1cd22c4ac03431e1be6e320e474d4e50e1c8398add4f9ae9d568a79e13dcee696

  • SSDEEP

    49152:32eU2auZtnDdVyoq3+Ub4XxfB2Zsb6Xd0XBQYH/ZFpzg1NnLja:meZXZxdAoq3+E4BfwZso0XBdH/FCta

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2