Extracted

• • Target

    90c51aad43aef7e4266b29e2d6141ff877a74c1382cfb405e936cfb80a6b4f92

  • Size

    4.9MB

  • MD5

    ddcf59728108d38fb303fb022f9970db

  • SHA1

    05833e4e64d25d759356c553e49b0622c5c032ce

  • SHA256

    90c51aad43aef7e4266b29e2d6141ff877a74c1382cfb405e936cfb80a6b4f92

  • SHA512

    4f3fe5d949cdc88e7947eedd3a4ed07f2ab38878e6af36d21aed0e001e011668144efc799734b81bd2594acf5ef06510d398f190b4ceb6cd689d3462cec15e81

  • SSDEEP

    98304:d4O0B34b9aiUeABwkUIkGcwxpc6hDTJanptszW6d1YX76yDJq39JMPt3HKqRDbi7:do4b9tkLkIxpcKHe/s6aY1DU39JMPt3Q

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2