Extracted

• • Target
    4e4c50c2593c9f40203a61be4e61a0db9c14dc70526d0a97dd47a7f4baf71191
  • Size 1.9MB
  • SHA256 4e4c50c2593c9f40203a61be4e61a0db9c14dc70526d0a97dd47a7f4baf71191
  • MD5 d257d16443cec04278b5f7409490165d
  • SHA1 4069dcb68e23f5a92b69932cdef9d306d27bc4d8
  • SHA512 94b043b9779f7c2da5e03e6860c99b5e039a38cad13983c957c29cbe162f1aa49656ae660a50d303dbcf4a9ba92561a86c70df87a03b3075f7d7dbf060a69bc5
  • SSDEEP 49152:32VUDq7CnOhQheyjLstml7w6oC5gdh2s0YGJCnhN:m62GHh7SO7KDNwJIhN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2