Extracted

• • Target

    bcfa1fe178c0e68c6fcd23fa4dfc91212fe0537b8534435f076ce43ac42b2ba1

  • Size

    3.9MB

  • MD5

    7c90d95717e487a121d34559c15b7ad5

  • SHA1

    f12b5dfac14db2bc97fda4ed464903232819203c

  • SHA256

    bcfa1fe178c0e68c6fcd23fa4dfc91212fe0537b8534435f076ce43ac42b2ba1

  • SHA512

    f7e17ffdca6b5c8d410d7f15ad5081022919cd8f6919b738fd13a64d6e009787c36f0394f743a82793d7d864956e23ba49ae5b303a50c25ec2854c5941027433

  • SSDEEP

    98304:CiUesi9bhwOJEdaMaeN8MmRkvYwcBaMKQgZFyPW:rNsi9PJE8MaeN8MekAgxfqW

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2