Extracted

• • Target

    4c08f8d77f5f5c84d67fdf0a51122aee3d46d8e78e988247d1afba570d6dd635

  • Size

    4.1MB

  • MD5

    b0c64eb2929214b828552830cc66b26d

  • SHA1

    deb1bddca364122870da56bdb6494bfe48a9cb6e

  • SHA256

    4c08f8d77f5f5c84d67fdf0a51122aee3d46d8e78e988247d1afba570d6dd635

  • SHA512

    80abcec72e32eaa3c47cdbdf3cc5d1ee237d4dc9df959a15a52c15df094a52a87f9dd907f3b2fe6ab8718c658db4f599678ec5850728940b7ae6cc3931fd4773

  • SSDEEP

    98304:COgwZA5fuJR1bqB+q880fIdRvMAAsJ9ZkmHQ/ZVdveQx/Z:b38u2zu2vMqKIQ/

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2