Extracted

• • Target
    SecuriteInfo.com.Win32.AdwareX-gen.1086.7459.exe
  • Size 4.3MB
  • SHA256 224d54592663f9d211560fb295f3d21bb1297476a8d8df637a57a3abf7202e41
  • MD5 ce940226f7474d08c76e33eb90fbe1c6
  • SHA1 9d8048b354fe35928f1644417ddf10e07f324730
  • SHA512 9ac6a796899c26be8caf9fa7b942b527dec93c64fe5f722d2b621c8f0e82f9f0fd2335dcd44c8a106fc5cb0eb6bd9e4644c2c1c4479c59a14f2500a65c3eaa4b
  • SSDEEP 98304:0SI4rYV6G4uk6xZl8HgL2bzAUWs9FrytU151wOxj4Qxu:6xVv42lYNJ9FrydOxUQY
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2