Extracted

• • Target

    af04d97db0789ae6583eaa17aeda1bb8f5262167262d8e329cbe1e5791010817.exe

  • Size

    5.0MB

  • MD5

    302802b2b5512a5428a68d3906bdbe93

  • SHA1

    90f24f51d7830db5d880fb2db844822fe4ecd0a0

  • SHA256

    af04d97db0789ae6583eaa17aeda1bb8f5262167262d8e329cbe1e5791010817

  • SHA512

    62c053266d316fb9a830f8775a4d94f45be72eaadb1e01714c695f3fc6e345a4e7570b40525872361d636a8267f88a182bcd1927861d8afe8f12cb4ef9f2bd89

  • SSDEEP

    98304:+1QLjkx3+qB7+uc7VAtXx1AuFBnskRko4YAnUMpqK7Cf4G/sstsQd1ZDlBx:msT32thPskREYAn0K7C//siXzx

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Detects executables packed with VMProtect.

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2