Extracted

• • Target

    9c39d61a7daea8eda91dc21808377ba47f575443ba7593f298545388aa142e72

  • Size

    4.6MB

  • MD5

    5582a52514665170d3db11c81a384c1b

  • SHA1

    3a06dda16ea0ae4173bad13887af60e9b2129ce6

  • SHA256

    9c39d61a7daea8eda91dc21808377ba47f575443ba7593f298545388aa142e72

  • SHA512

    e0b9bc61bb9cfc82d6531109e75a337dd3131c706c99e006d6bfd4c3a3258fd259e6b1292fb8d1f2257ce0ff274c899cddaecd6019c0411ced11e7a7116d76d4

  • SSDEEP

    98304:mg+xeHxB9bXs6+ZmXY3dWb1cic6+OcS+xWPIkfbj4fWo4ndjV0oIJrC0lyS:QUHPlgmodW2i1I/9kzdtVX+CUF

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2