Extracted

• • Target
    921bb6e3a86de7e4d28447a4cec13e70.exe
  • Size 4.1MB
  • SHA256 098a35dc7ec119ef4f9ee52734366b96942a5f594dd343a7763b63e188ef2590
  • MD5 921bb6e3a86de7e4d28447a4cec13e70
  • SHA1 c58eeaa11a1ce14b6ad3dfcffb4152647d00efcd
  • SHA512 608f71a916b56423e4644308419273e7c94e15a35101139abf119bb2528c8df55a7fb1d58688a679ffa5dc3e1e93c0afe61691a650be17d51c85e49ffbfd3d68
  • SSDEEP 98304:CcCFbVUdWyGUOv9bp/GGftB0yPc7UZoHFa/8670o6GZRNQx6E:HCdVUWdGODzo8/Bb1dQP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2