Extracted

• • Target

    495ca5eae2fb4ff041f2e4ee79dc92d69ef41c7f388f4a8ad30ff8d5ad2185b6

  • Size

    5.3MB

  • MD5

    41bbae1643e15929d07776431147c9ec

  • SHA1

    aeec8f3dfa2fa9b61099c65c1e10389cede8381f

  • SHA256

    495ca5eae2fb4ff041f2e4ee79dc92d69ef41c7f388f4a8ad30ff8d5ad2185b6

  • SHA512

    509ccc01fcad6fa2e91601ec9fe835c5505aaf3b81281a51ba12cf2a2a22cb19f17b2cee466f561d06089853df00877aa210a9bf47f3e5480ee7bad78deeb87d

  • SSDEEP

    98304:+fAIgzlNGdj2X6wES/UTYdIWn6OXd/9MM4hlNZEQZ9l+uuAcf+BBLtLXd1ZZQ3:aArWdjG/UZW6OXXMMWTEqpMf+ltXZM

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2