Extracted

• • Target
    99d02207061f8cd1bb41dfc5ce4891f5913bdf35498e043c7d8c2b9ceee2c00b.exe
  • Size 4.7MB
  • SHA256 99d02207061f8cd1bb41dfc5ce4891f5913bdf35498e043c7d8c2b9ceee2c00b
  • MD5 9b1176e24facc6e241ad25eaa864e746
  • SHA1 12746866303969d21b32ea5950ef7f429dc61513
  • SHA512 df6b0ed0e7883bfbe531ec8dcf6baa8e9b1b85c30ceaa400286ffafa0076c6f3353830a13a94410c9d4b050f2efe1973d1600cade419a06d359a3dae36eb5aef
  • SSDEEP 98304:mTChVFZg8XPK2LrLUMdmqIQ107Tz9zNVaJcoqaeQ8+An6:eCLFSOPtLnI17VNMeoqnnG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Detects executables packed with VMProtect.

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2