Extracted

• • Target

    67bc4c152b47cfa91774a8229c760bf40c328f88855a38bc07b44bfd61c45ac8

  • Size

    3.5MB

  • MD5

    473b76e2285b933ee433f9e33c415b87

  • SHA1

    160a525c682df28b4caea6a9eba853b54e2e62eb

  • SHA256

    67bc4c152b47cfa91774a8229c760bf40c328f88855a38bc07b44bfd61c45ac8

  • SHA512

    9c72229eb17db997429b5b48cd23ca0aa985fee02a051340a49dc2a63eb16bc9cbffea0d9e1af77520f53caabbdd9764c08e11a5f4e8ae15ad2c9b6b0c43d215

  • SSDEEP

    98304:+pWEBaSH/otrqs5SxMcg7EtQuyBIztiorlfSX21vq+Xd1ZH:tELQ7N7IbyYqXuv/XH

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2