Extracted

• • Target

    70d525fd4fdc5985da866c0ddb936781b6b58b1e4aae278abee3fb4ab4862f47

  • Size

    4.2MB

  • MD5

    13a4e17f050d7deeac2bf404a9715a63

  • SHA1

    81a8025d389ddb91b0b4471eda02c912cbd443c4

  • SHA256

    70d525fd4fdc5985da866c0ddb936781b6b58b1e4aae278abee3fb4ab4862f47

  • SHA512

    833f53603c063f6f12efa71e5c47690badb82d4ab03637cc51ef8cfaa39173c40d1333c3d243cb356d6ae1355cd3a7b1ec2d1841757bcee3b5c2a4756180e4cc

  • SSDEEP

    98304:+Aopkt5DfHUUQ/i+/bpyiqwgt9K2GC9FdrhcYgA9md1ZO:bukcUmTbpymM9fGC9JXAXO

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2