Extracted

• • Target
    5caca1fa3af6b9fdc38e5edaeab87e15ebadb5371d5153dc4627ceee14349e0a
  • Size 1.8MB
  • SHA256 5caca1fa3af6b9fdc38e5edaeab87e15ebadb5371d5153dc4627ceee14349e0a
  • MD5 48c94bfac45e9d22345dd5bfe55525e3
  • SHA1 c15490a334bf7380af2db236bc15898ca7683b54
  • SHA512 7d2d20da75fc280a6dc26fb12e78d45790e06abb3b51f9245c2484290c530cf145adb6e08e0a6c8823fe243620f372abdfa05f6bbcaeac5c19f75578214d09c7
  • SSDEEP 49152:32g90cNX6N4xtZg33mHFU9oIGSNwkobvKqF+lqwq:mgKcNbxXQ39KdkobvKqFaqwq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2