Extracted

• • Target

    8690c78a5b47768ca6bcc4e467728c9ce3d699c0bb718a9aaec44dd5e8cf8dab

  • Size

    4.9MB

  • MD5

    8e97078cb66e1d255dac663ba939a172

  • SHA1

    846435fff9c8ff4dd68126d1edf36a1a1fb2708e

  • SHA256

    8690c78a5b47768ca6bcc4e467728c9ce3d699c0bb718a9aaec44dd5e8cf8dab

  • SHA512

    c70051772c4e141a0989824c36f134a67773b9e882145e2932169199037d3cc720099fad9b0b4cf6b3d4ecd9c24da6c47e4ceafeb1b742ba09d0ee321f11bc87

  • SSDEEP

    98304:ZviwzLucLfIVONWZGuIeeuYzmQiaaLO6dObIl5iRvP:ZvigfIQWEetY2ZdnfSvP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2