Extracted

• • Target

    2a8c9a9ab73fe6338f48abc3395a0e6671126e99648f80bcd4b5b519b3a0fef6

  • Size

    4.8MB

  • MD5

    206fcae58ce4883d203e60dc568a7f5d

  • SHA1

    fc7faa53949e17280cd95dae6b919486f3c60904

  • SHA256

    2a8c9a9ab73fe6338f48abc3395a0e6671126e99648f80bcd4b5b519b3a0fef6

  • SHA512

    2854724c682f057477539e633ba6c698aa21dbf8161f7ff1254a33283a90473d817bfcade3ce264ba6c2127e00f181ebd0a5db6a0bc8c68ad79704e31a0a8d19

  • SSDEEP

    98304:+NnTFL73XGLb0xSsxH8a32/v8D8fFfZyOg+AkvIxPeGdZIr/p77hAkRTRtd1Zcs:Mn1+0xiF/tf1ZYvkwkV/t7DRTRvXcs

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2