Extracted

• • Target
    f4a94c6dfeef8148f1d5aacece570ac16287c3a841f3a3e618e7826507a3685a
  • Size 1.8MB
  • SHA256 f4a94c6dfeef8148f1d5aacece570ac16287c3a841f3a3e618e7826507a3685a
  • MD5 3cbd51dcdf398b0323b851f232a111c0
  • SHA1 fe3084ab9b7e16da291c357a5f284dc8cbb2e8b1
  • SHA512 6172a3617b20eb6c4205f2be7859fca3ec9a23ae5c4289637e8e9d0f4e8604b7aa14e01e289d01a7f85ee66e41463f5572485c09b327ea3f400e53c274d2554c
  • SSDEEP 24576:320eOr8YG9wbmoML7KZQf5yulBh7RtEiDW1tOh/VdFc9YdmPagsbHwmrveCoVwaK:32WwPq29BBEr10/VdFGYd7jKLOaphni
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2