Extracted

• • Target

    cf4cf233883b46f02c2c0768d44245b3b00043b735ba184f17ff125a41b6d741

  • Size

    5.0MB

  • MD5

    ce5d16af04f271713782bdbfb4c0bc34

  • SHA1

    bc519b8cd3fbe27b816512ac50b9fa68792db59c

  • SHA256

    cf4cf233883b46f02c2c0768d44245b3b00043b735ba184f17ff125a41b6d741

  • SHA512

    20c1d1418765668350b43c1a425779831bece559217011ad4f36cf152ac7822e859c1e5f7eb56689734d494e3e03401c961d770c80ede575d4f4fb35d73bab5f

  • SSDEEP

    98304:ml11SNVVsVtIgp4SjvCBwK3fL//goiY44kB8v9ozCkt20qBUmYyKb2HmzocAY+:AeRsVDxumKjHviTdMoGkJqa16mzeR

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2