Extracted

• • Target

    d69639d8748700e69c1b27f3a78d28ae093da8631a80691e2d91615a57c5e3f9

  • Size

    4.0MB

  • MD5

    92b825b079f38bafe8205e0b10ec325d

  • SHA1

    9b5f49e1cc2c25e15f78c6d07625486dba69235d

  • SHA256

    d69639d8748700e69c1b27f3a78d28ae093da8631a80691e2d91615a57c5e3f9

  • SHA512

    90d9e74bf8ae23b939b33802b1f1d3c9462b4a8194a42195cf2d59287f30b29490f5f70a09fc364f5432dfe1686dd320b04de88378f9e7d139ecb0f10aacdcfe

  • SSDEEP

    98304:Cm6eFqwY3BzvhWtSSlbKeyATcngKp3yGBtIpchgg2TQxE:d6eALOH8ATq37tIplhTQG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2