Extracted

• • Target
    e84e64489c5c44e19e125e3c14288a54c416e5c1600da5447a863fd39bae0069
  • Size 1.8MB
  • SHA256 e84e64489c5c44e19e125e3c14288a54c416e5c1600da5447a863fd39bae0069
  • MD5 6087df27820e32ad0efafa2bcf40876b
  • SHA1 eed3402a2d8233c90fac052b0730ec356f0ba3e6
  • SHA512 aff9455619c701764182def660d0994d28b9607b5033386b250e6707f6165fe8d778ef40428eb9f96c8a07ec877934c5723b031f963fc0f0d54414cc8d35d0d3
  • SSDEEP 49152:32/Hp8u59iWXgN6XAJrth4JDybFfFwwy23SacHwh2tWWuuQq:m/HtEWwN6QJth4NybFy9acHEaWZuQq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2