Extracted

• • Target

    3a5e914f498f5cae0ff8616199c1e8ed1f01ed925f0c8ee03e9b710fb6e8e1b7

  • Size

    4.2MB

  • MD5

    040d9594cb081c0fb225d1375445b4a0

  • SHA1

    43653149ef61d07ee6f8efd45b43d2e7e6adbc2f

  • SHA256

    3a5e914f498f5cae0ff8616199c1e8ed1f01ed925f0c8ee03e9b710fb6e8e1b7

  • SHA512

    af2e84d618a76225e0e9412d1100bf730223001f72760f65fd1a6f55766b9f01bb93aa22cdca6f40789b0b61f4719684210e422fe6a7c8aead0c8ea6deb1e268

  • SSDEEP

    98304:ILofN0cS1s7JHYMQB8NcMkWdH1oDKRoTzTd5lWyBXxMCBsERzbHvn:j0cys7JHRmZWdH1oDzTdWSxMCBsEhvn

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2