Extracted

• • Target
    e2a85669fa86f43152d3e95ca0259e8e223b44a4d6154fcd44be734b4b58b6db
  • Size 1.8MB
  • SHA256 e2a85669fa86f43152d3e95ca0259e8e223b44a4d6154fcd44be734b4b58b6db
  • MD5 599064a54c1b846cd5bec1d463f4f841
  • SHA1 c0de0752e324eccc973262ac250dbfcf4805f469
  • SHA512 b9dd7ccdd3e3d008ab866569a7e51ac5a779feb59d0faac13612b6e8d13e5c0ebf6fd3b9ed2ba27520769b97922fe88dab692a10c3302266702defc3a2ad8f7d
  • SSDEEP 49152:32OwGkwm9QpY0z44Ti4yNPwx5crsm96MijxjYkUBu9xVul:ms44TzySmsmr6xjYi9fE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2