Extracted

• • Target

    a17c587d6b22121727752f793fc982f36ee897398ded91e2408abefe270a4342

  • Size

    5.5MB

  • MD5

    618657ac63fb25d0c082be57fb66c63d

  • SHA1

    1097c94b915289e923f7f1327f411b802fae90f0

  • SHA256

    a17c587d6b22121727752f793fc982f36ee897398ded91e2408abefe270a4342

  • SHA512

    16087aec271a4f98af22c27fb3c63326b26b262547413cce0b0ea9d5e74cdf0b861e254dafc42cd99b02eb7242c2851d03ce22fefe8c8b233f9e9ecc9596b01d

  • SSDEEP

    98304:mIMspkNNwok2gwNZkYKfs7i0tLQp6gjSdsNlyJquP4Fmc+Umh4fuWG4M591IvkgL:ghwoLgwU5s7i0tMp6MSds+Jq+Sklh4vR

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2