Extracted

• • Target

    9331d1a1817ed5cad1e190606aa24fee07f703367df6fc6a461bc8c8e7e848f4

  • Size

    4.3MB

  • MD5

    e3b572b70324c8933dc2f0b8a5c5febe

  • SHA1

    28773f39d1c427ff204b60f992dc8874f99d7b88

  • SHA256

    9331d1a1817ed5cad1e190606aa24fee07f703367df6fc6a461bc8c8e7e848f4

  • SHA512

    5ba677a14be1af8ce3937a2df5c57abb6b3f96161d229f0c057c343e40463050206c142e3b1b4aa0ea12df34e2f1809482e65dd036be2649f5cde69db7c2d517

  • SSDEEP

    98304:+Q/zNg63hClcTUU8woglvLQFxkikQiXWgVje3xEz8yd1ZyI:ZzS631AU80vUwi43Vje3xEvXN

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2