Extracted

• • Target
    b1675b90752f525fe619da762ee7ed0178fac27ae04c14ccfee6e93efe05bed3
  • Size 2.0MB
  • SHA256 b1675b90752f525fe619da762ee7ed0178fac27ae04c14ccfee6e93efe05bed3
  • MD5 aa532d36098dc515a3ab5b4787186962
  • SHA1 2fc2a48bce345b89a7a825827a7cf83c5d038f58
  • SHA512 7f8af605c3b03b5cb0178220ea75d3b4f0cdd8fa315f5f88657410209ff6a8d7a00346ccabcccab0a62ede51a21ddf52ce8ef2fe6d6f9ad5bcc63a28a78fa451
  • SSDEEP 49152:32Phc03Mb7lmRzfTmRe9RUvaG9HaZoyIGY23yo3pTjul:mPhhMb77e9RUiIHHyo2/XE
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2