Extracted

• • Target
    aa73ee129497b2b8c0d2a7546dc8937e6787303e3eaf70640ec28445ecf1834e
  • Size 1.9MB
  • SHA256 aa73ee129497b2b8c0d2a7546dc8937e6787303e3eaf70640ec28445ecf1834e
  • MD5 fd8d2e94f71c0a6e2ef0ceb752266a24
  • SHA1 9747f24bc81a95cd265e48b7dacb0c548646b065
  • SHA512 2ab01c81cdc7b5d97cfb1842aea31f2ea3b2914a5030bacdf79c58a10660b9c0cd03ccd80f6ccff858e27f6c8ad04b96994c6b003058fd7214f39feb9098bfdd
  • SSDEEP 49152:32RZ0QV+EAXCmMLPnZ728dgn0LiezazrsY/EcY:mROQ+ML/Z7Jg0LiCWQgEcY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2