Extracted

• • Target

    0771a2e746b2181a74824e35be119fa2d9aa02ed57928bcddc0344f89e9ca135

  • Size

    4.2MB

  • MD5

    a767bc587bf0305b53ae98f75449e592

  • SHA1

    c0916cb03ea20619ebddc75aad783b4d2b4f25ae

  • SHA256

    0771a2e746b2181a74824e35be119fa2d9aa02ed57928bcddc0344f89e9ca135

  • SHA512

    8b5a09fce6f0b7256472033ad3ee8f4665a086c54960a1507036499b85bc54b3aaf2094179efbe84fefe296e2cc54e77854002ced06dc429dc68fb40ebe8c7d3

  • SSDEEP

    98304:+1c7i+oZsZfOyeO9a+Ivw09a+PRJzvsUD6mme6Vqd1Zqm:x7ySZWye+MwUa+7p8V6Xx

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2