Extracted

• • Target

    b20f9b18894ef38d25edfca8c8caa71c5b8a16ceab31d953d6f7205d754b22d9

  • Size

    5.0MB

  • MD5

    13e4fce9790705976c96a4c79852b7aa

  • SHA1

    b2844504726f3b6ac2dbe6f3ef2a23fd103374c9

  • SHA256

    b20f9b18894ef38d25edfca8c8caa71c5b8a16ceab31d953d6f7205d754b22d9

  • SHA512

    428fcd78d095172ee920dd826d0bb94f8eee855e447226fbf492cb5bac4338b02ebe67f5559f8e465d96ca654e8a2dc774c05a7a6cdf28be9f223c66c344ca79

  • SSDEEP

    98304:+SgdoplfInh7Po8CFvF+PcaYvOImEnzYO5HT6/QvHALkxECG4/dhngKbd1ZR:udoHwnlQ30NY1mEzXhu/QvHALk+CG44I

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2