Extracted

• • Target

    7e93898eafbc0277605150085c498a11cc8c51192a52f1a04781de8096c40ad0

  • Size

    1.8MB

  • MD5

    b12a8f8dbdfe288340dea3969b6891fa

  • SHA1

    46ede1b2ef2bcb8842fe185ec251e3c534353846

  • SHA256

    7e93898eafbc0277605150085c498a11cc8c51192a52f1a04781de8096c40ad0

  • SHA512

    a6202ed56c7b8ed167148c323df793ad105b7e394fc6665b6bdecab165561fc7cf45cffed368bae3a6c2e1b15817a409f1fa695a7b270145ac77296c82284b0d

  • SSDEEP

    49152:325iFh0OS4V/z9SKCK95WlfkxSIXHHHHokq2:mU/0OrV/zIomlEnokh

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2