Extracted

• • Target

    27d91f32a76d080bcf4a91df410694f0c9d092ecc73a80f38bc369408a4a12fa

  • Size

    1.8MB

  • MD5

    6441dd056470d18a5b774d7a675a14aa

  • SHA1

    b9aae84d7e940042f22fd6d28a265297ef6f2201

  • SHA256

    27d91f32a76d080bcf4a91df410694f0c9d092ecc73a80f38bc369408a4a12fa

  • SHA512

    a90a425e74edfe8210e7d05e0ce4da41fcfd39f6b268b74c772601ded10994ff5d2fea25a978147868102d50bfb58873156dad1b4c2c1b69a5fc030847b2598f

  • SSDEEP

    24576:320B2HN9AgS1v8Sb/CHJxn/tCWyzis6jSzAgtFpip1F/+SUQMmBqKmxsIt6dz5/N:325HN9Jau/13z/1IjmOZt6dF/VU1OOU

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2