Extracted

• • Target

    05bf112616cd3f147ce413469bae1830b0c69bab84da7dd19358cb0805e320b8

  • Size

    4.5MB

  • MD5

    0446a731a1b5ffb13295f03550373385

  • SHA1

    a2da3e94701516d6ee337ad887119b62daea8356

  • SHA256

    05bf112616cd3f147ce413469bae1830b0c69bab84da7dd19358cb0805e320b8

  • SHA512

    a039f779f86366cd27435551e78e33b80afddac6064c354bc856ecf4c4cf2839161ed96ed8fa53834310c30b0e611b9b9e338ad65634ba14afe6857562d46324

  • SSDEEP

    98304:YHaKudfXxN+sEadbdwwIpbLeq2bwVoBu3ncrq+/ROKwOev7:Aa3XD+epwlpCbEoBuiq+YKw7v7

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2