Extracted

• • Target

    8a9b6c452db8aaf9d049df0a6459eaec013b7cb2ebf4a2340201a9ceb4d4a751

  • Size

    4.2MB

  • MD5

    bd5619236cab387b962511712631bbcd

  • SHA1

    a9da579c8c916fdf9b56d023daa8538cef651802

  • SHA256

    8a9b6c452db8aaf9d049df0a6459eaec013b7cb2ebf4a2340201a9ceb4d4a751

  • SHA512

    18a5457f85b3d63bd4f161419e3c586984a01d806c6ec8bc7910a86ac7c4279c73a346ac4684a074b36f41c25dacfe859b12eede7b953700a8e5a31b64f574c4

  • SSDEEP

    98304:CCVQKbMZFpONPy/CZR0RpodE3dqITMRPyPQ8DRza9EFnQxU:DVNYZFY1Z6odE3bMRPYFa9EFnQ6

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2