Extracted

• • Target
    e250e4bfdd5a58be90228eb5b2b4fb0f4686a36b433b130cbe50a4008a874c8b
  • Size 4.7MB
  • SHA256 e250e4bfdd5a58be90228eb5b2b4fb0f4686a36b433b130cbe50a4008a874c8b
  • MD5 d2f16131d658784ee0234daef80a4893
  • SHA1 61aef10c8d42c677a2ec8e93ac3326ef3891bb0d
  • SHA512 ad79f1d21040b4e03044e7374662cefdb4bebc15df3a3a9544ac06eab20b25fbb659993b5a8225d63eae50819ab22eec88ff70edba9533f8bd11ad55fee42bce
  • SSDEEP 98304:mLdFZY+c+ESBPrIZIluqbcl94xpFi22z+W8D6G6jgslLZH1j6:SFBEeUSluqbclSs2U7Uuj3FZ0
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2