Extracted

• • Target

    b18c77db736e2456642fba89287e3ae60a56efccf8560d70fff417dff14b416c

  • Size

    5.1MB

  • MD5

    d60153920592a5c095444889f323669e

  • SHA1

    4e22f19f497c873c66096ab1d8389b3cfd8d2f73

  • SHA256

    b18c77db736e2456642fba89287e3ae60a56efccf8560d70fff417dff14b416c

  • SHA512

    8192a16aee1294474edfb1ef44533af7fa87137a5ae315a5e0109fec3e8fd9aba91d04ab63d2a177ac193edd644e3638ce99bd477880ef28ca5a65f8695cf2f8

  • SSDEEP

    98304:mdiv7lunZ2vhLGQgnG78PSoxdYga8+TPihNAn5BT2njvL3Cn3swvLq:fDY20Q8PdzYvVTqf0Ujvjmq

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2