Extracted

• • Target

    0484dffacfa1ff615b52190c5c568635c15736f873636af1afe5d06c4cf7b606

  • Size

    4.3MB

  • MD5

    8651b3af3a6df4e8a5e2ab5685d9917a

  • SHA1

    99d9da2181f240fe6a6c054f5bba1a86cf5683ca

  • SHA256

    0484dffacfa1ff615b52190c5c568635c15736f873636af1afe5d06c4cf7b606

  • SHA512

    6999a75ac9036aae05d846bc02ab875e21fbf25f5e96ae981b31eaff121a9b810676e149037c01e2a44c49495af561e6126ba861c590f95ad46bc7aefb5fce07

  • SSDEEP

    98304:CkuPHAwkKOsoMgp3SlIpYJpnN9esRNj3FE6IAzcWMxioZbENwlQxbhq:wPzkKhoMy3k5N91RB26FzcWGaNwlQjq

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2