Extracted

• • Target

    0db5cb0dc3e4c2bf5b0f1c17fd944fd184cd230a5363a2f2f92aefef4756d446

  • Size

    4.7MB

  • MD5

    4257e695173563ca13936051ecc0d03a

  • SHA1

    091e9622f7726d5227e409d9daab6e1dda4aa0ae

  • SHA256

    0db5cb0dc3e4c2bf5b0f1c17fd944fd184cd230a5363a2f2f92aefef4756d446

  • SHA512

    12dfef1732cbed0105740bda7f86f33e7e0e1c255dc1e4729e2ddbeb2505e44d9623715fcd53207e03ac26b765ba312a95bbe1c6d07cf8c72ee75e1dbcb02a64

  • SSDEEP

    98304:ed/szlyREDZB/zTjh6wotizONXohCZ+IrOaip3N8dPCRoaSfVS6ZMaeZ:i/szlyCD/jh6wotqONX3OhAURobS6aZ

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2