Extracted

• • Target
    ff66d8e75eccb014fd09adc9045bd1630219def9a7635d4a9ac382466eb7f435.exe
  • Size 2.0MB
  • SHA256 ff66d8e75eccb014fd09adc9045bd1630219def9a7635d4a9ac382466eb7f435
  • MD5 f306ea1faa91611b7bc26e9cc0bd3956
  • SHA1 accc3aa32f33273b46765d024c0cb16cc8463486
  • SHA512 da7398c9b8022b66a038e5c42c90b8ddafdb0b0d1a9a2c466582f4f13b02a90d4e51033cfeba5410ba5def247232192541e7eaafa01102e59370f3ee4c6d1608
  • SSDEEP 49152:32e2wVd44xMOR2voxA14iCOeIVjwpEoC+M3NEPTWmxbX+X3g4gtStO:meLV6rOWgAOirtjYEow3ePSWL+Hg4kwO
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2