Extracted

• • Target

    666bd2362bf87a87551fa40f29e1694a9233f508c9bfacb5f58eb045b351e530

  • Size

    4.2MB

  • MD5

    9b844a2851661bc730684a4a2fe14d01

  • SHA1

    2adc3a1a0c4151faac4da7577a7296b7b8ebd8bd

  • SHA256

    666bd2362bf87a87551fa40f29e1694a9233f508c9bfacb5f58eb045b351e530

  • SHA512

    f49454a88a45603d352cbce0869b63bb2b662c2625c6090e457ab89a6fdca446a626e634c96aa7dc06a5ec86ce1d24ef9e68238e5f3ea60b6f1fad7ab41e5f2e

  • SSDEEP

    98304:VuIiurjtASfW9EEDLZ40Wd7tXoQyaDC7UCMWn6VQvo3WpjGKvYb:t9rjtASSEYZ40WrByOCghW6i75vYb

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2