Extracted

• • Target

    fd710dcf20f70aa20147e7ccc428cd7d9a4373f650f51d1903ed0dd29169869d.exe

  • Size

    4.3MB

  • MD5

    7b5c9c816277ce3e0ab2c2987e2fb17d

  • SHA1

    38d830f6b5cfe60ffc1ac3194c84f53d28afa063

  • SHA256

    fd710dcf20f70aa20147e7ccc428cd7d9a4373f650f51d1903ed0dd29169869d

  • SHA512

    a24ba544c500446eced652f945618abf48f9898ef68070441fed894aa8a2853312b3a9e691ddd44c8dcf4013e723df40c7b104cdf2a0acbb839b78ba841b6e05

  • SSDEEP

    98304:cRW2fva4Yxwp0BT7o0OaCs4qcezx9IAAfdwUnvJG7Ly/E3Nm44mhjgc0Gft4IbB+:mXHYpB2Zqcex9DABn4b3NmYjlXVLv6

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Detects executables packed with VMProtect.

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2