Extracted

• • Target
    a83d0865c2178833fe29d6a1141f3bcfdfcc426ca373028688bba12050b31e45
  • Size 4.6MB
  • SHA256 a83d0865c2178833fe29d6a1141f3bcfdfcc426ca373028688bba12050b31e45
  • MD5 53924c942e98d5dd872c1c84027400c8
  • SHA1 3708ce19345c8538791864d30b28b8e82615b978
  • SHA512 b0af1ebdb49786339f0d9c1f87c69ea1b34a1c3f04ad1f9501395818b1a935c1ec16f365ce8ed8e508e24beb88e1e489c7fae301afd3647ca1268e4c2fe9f668
  • SSDEEP 98304:m09Z2SMlqKTMkoKJKConploySnfzjEVTnohHrUuH2QmphfK2EQj:xJMlqpkxJKCnnfUVyrUE2QmphfXj
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2