Extracted

• • Target
    a83fa5bb02751dbfa327f9ab06dca6df.exe
  • Size 4.0MB
  • SHA256 6b251b357a4ff2ff8fc367c082918f11872bcfc6ba6b69059c0d876de53337a7
  • MD5 a83fa5bb02751dbfa327f9ab06dca6df
  • SHA1 f16ae580b52c611b0666f26a27f2027b111ee181
  • SHA512 4a8e582439deedac82ff5dce0737b55a5d5b4e870a9683a7879c58602777d76fb84a34b3d5c062e71cdfeaccbe1b3fa125e6f803dfb7be1dac0efea70b44f4b6
  • SSDEEP 98304:CjOPRTI3Nar3fLobbeVfnGkSVqDWmbnsazR/7/qKwPLBzI21xQxE:DNIe3k/eVvGxUDdZ/q1LBMOxQG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2