Extracted

• • Target

    e6880c046955dc0b9b39b0b6e907eb31eef4f5767fb2b9999c40778ace14baea

  • Size

    4.3MB

  • MD5

    8e6addca8af38067a65d48df622edf06

  • SHA1

    5b9e5cd4461943910d840471b6dd80cf37fa1292

  • SHA256

    e6880c046955dc0b9b39b0b6e907eb31eef4f5767fb2b9999c40778ace14baea

  • SHA512

    bb62ab4af74dc612a47a90d534191fbef08dcb3cd6bc27ab6fcf2c31c1376d57dd0611d4235569a234a3cfb07b2b84de2c01153081a24ed93f3da9ac1ef4418a

  • SSDEEP

    98304:+lPQCzZXLGAfSlZqsHylg9IYptU1UrBwQboJ5xQn0syd7zd1Z+/:gPbO2i9s4BrbSxBVJXs

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2