Extracted

• • Target
    696c267887a55c1d922ce1d6f73d9b4d74b6d196c855eb63cc5bf0d3384aa3c3
  • Size 4.8MB
  • SHA256 696c267887a55c1d922ce1d6f73d9b4d74b6d196c855eb63cc5bf0d3384aa3c3
  • MD5 9dbb6de864c57bb05d42cc502fcf0ce0
  • SHA1 29cdccd8d3f2cb9d079a4a15f5097edd6da48119
  • SHA512 6dfac099bf4ff4497fa26152658b24066e7d462b9d6c19ae76e4281c654017ef5e84a3c0c3d025cdf0b793f2100a63f5d8e76507bf5d8768b40889578ee6e531
  • SSDEEP 98304:mSTHK9RisXCVlWTIKppEIm3UQ3X2YdgQQe5WUEZjbdYwTu01fQMUbnD6:FDl9kBmkQH2YdgPe51E5mYe36
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2