Extracted

• • Target

    6a7474c2816a133d9bd91aac037fd5711943a15cccae04f86b62e03abc53426a

  • Size

    2.0MB

  • MD5

    b105b09f5d81ab91aaadd47c1d75fe0c

  • SHA1

    888f5685be3ad1707aa25920b3f4ef6c61644745

  • SHA256

    6a7474c2816a133d9bd91aac037fd5711943a15cccae04f86b62e03abc53426a

  • SHA512

    7cd60db3cd1f6d84ecbac065217c6f78b9b5f1e5abf8203f21881d7d0d9a2f7cb2fde9bddfe2bd113f0377358b0351f2e381201840eaa82d2ce7b5938afaf7df

  • SSDEEP

    49152:32Un/9hBnoiCCx0C3+mHJ9p3MPeE6BNIe0lVT0FTFJroZ:mUn/9h9f+e1m6BNIJ3YpLroZ

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2