Extracted

• • Target

    36916c08e555af01ded3ea914fbb85cdae583171d9eede75b33f9de7343bd2ee

  • Size

    5.2MB

  • MD5

    3543dc2fb466db6f1ed3cdab877228c8

  • SHA1

    ac965c9b843446bd18bb8ad58682eefcb3e43a56

  • SHA256

    36916c08e555af01ded3ea914fbb85cdae583171d9eede75b33f9de7343bd2ee

  • SHA512

    91b777224ad9829448cbddefb5ab0acb606116cb96de11ec70955e5ac69c3b4992e65c27aa836d9a2af43233b16ed0662e7022d3fc50a12bb3c9becf65e959fa

  • SSDEEP

    98304:mPDPe+Aqtx+yb/jwnvo1XCrIpfSRAD+J+bJtf52:GDG+ntJb/AoZCr1I+kB2

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2