Extracted

• • Target

    c0ddb4b2ce5246b93e23bce91d7cb83c388d909f05f38c5fb0762786e65d2895

  • Size

    2.1MB

  • MD5

    7cab479f4baaa691fd638adb03941fcc

  • SHA1

    61deb668973af8a6041524096d2faab0dcfedfc1

  • SHA256

    c0ddb4b2ce5246b93e23bce91d7cb83c388d909f05f38c5fb0762786e65d2895

  • SHA512

    0d4a5f6d6b1a3ce4802cbaf562b6eacd6d6accab92fae01fe90a8c674554bdae0187b022f47dd7b69f27ef4a33da5c069958103766e34790d3a689a318859cc2

  • SSDEEP

    49152:32iOwRvHVLfAwWV82J5Pnr0Mk3JWivCsH28KxNIhW63qwjn:mu/V8wj2J5PnQMk3EivCsH29xK4C/jn

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2