Extracted

• • Target

    e5a8065145268e421965ba36bd4218617816f6753630e30e96ab1c2a5a02b712

  • Size

    4.2MB

  • MD5

    bfab5648e5a967b4ca294eb858e64367

  • SHA1

    bbc978ce56fc03c1e4ee99e880f911852512711b

  • SHA256

    e5a8065145268e421965ba36bd4218617816f6753630e30e96ab1c2a5a02b712

  • SHA512

    a2d814e442f9d5a535e74b1c23858eb64a4637692958fc7b879fb2e384e9fbafb514dec9aed01c67336f17e40df90f33cdb48080da61c9f9ad3309fedef62c88

  • SSDEEP

    98304:CODIgEF4Nev9qqd0VrlEa1X5XX4FJ4BCw3I62MCJdQxbhq:NuqeAVD1pXX4r4BCuoFdQjq

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2