Extracted

• • Target
    1b0f5818b1aa29d506ce00022595a719ae9400e2ec0d0ef7af8531e19c50706c
  • Size 1.9MB
  • SHA256 1b0f5818b1aa29d506ce00022595a719ae9400e2ec0d0ef7af8531e19c50706c
  • MD5 6c1ba6a20d3c3307b15c19cf54281d55
  • SHA1 35745c39d1f9151219d6b877e8b83e9006d6a046
  • SHA512 8fafdfd83935215d51b309bd93d047613eb76e97e3399887392a04ff23017becfc5016a9c2b2efb3bb576b2acfb6f12ef3213302ce5b8d17bdd40485fe1db5af
  • SSDEEP 49152:32pRzB1hRSJ9n7eziuCgEJjwkA78VtgMEWDA2tY:mpr1fSOe5gUwP7MtfbAmY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2