Extracted

• • Target

    25ae92a255d78fbfb77626027792084da685609364c675944356806d8d19a93b

  • Size

    5.1MB

  • MD5

    99a701e355666c6e0a460fe999ba4fd9

  • SHA1

    5598df029ddb35b34d2c84637d5fc03f8e2b8dde

  • SHA256

    25ae92a255d78fbfb77626027792084da685609364c675944356806d8d19a93b

  • SHA512

    1a1a2c3763ff2f5e0648a7d24a746cb4e1998c45dca5aa25efc7c6fd84a4c9cb6a8b70dc4ffd6cc1d714cabeb133ab197143e8438ca82cbd6c34d07962d0d28e

  • SSDEEP

    98304:m6AQ5ewCD4+tlb8W3gJxyNVRdgfFDY00z8vFW39qPrlw8GMAIXMx4Lq:ZewC3th8JeRWf302aAPrlwL1IUsq

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2