Extracted

• • Target
    75ad777a8aa1b275cb97f049310b34b2de79179247245a88ed06354c6f9b2bf1
  • Size 1.9MB
  • SHA256 75ad777a8aa1b275cb97f049310b34b2de79179247245a88ed06354c6f9b2bf1
  • MD5 b2a7146d980027d404f5c9c2d3afcca9
  • SHA1 4a3fa040a8435c850b95341e1d3a37d8d2f24e3f
  • SHA512 fb90a9ecd84ace985749be7d4784570d56e6fa198ff0795e6ff54faa54feaaea63e0f0a5025be9bc43b819348c53d684afff0a3d0cbd963efcc4b41aaf14786c
  • SSDEEP 49152:32G+IWoEN8BEX74Q2VdEU9CCX73PvcbQF:mbIBi7iMU9C4fOQF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2