Extracted

• • Target
    ee9c3dfa59620cfed3440c9da9d83e75c2f387775cad8a71b8c2cf142999088c
  • Size 4.8MB
  • SHA256 ee9c3dfa59620cfed3440c9da9d83e75c2f387775cad8a71b8c2cf142999088c
  • MD5 15facb68a93c86d04e38214771836afa
  • SHA1 4c614ca274edf01151220a597a57e5f1d30b40e0
  • SHA512 c0b2378922e2a9a7fbb75ce46aa420c802853f1c55bcf426aa39e9d15879fa5de64b4f4a80c31f4795913de6e8b26e516958e8f04e04683c7e634309915849f4
  • SSDEEP 98304:mUxklvkIIkM7+x1yidYgMgYPcajNKzIu9YwMPeTUJw1Bh0C:h1IywVypEaRKMuCJPeTU61BhN
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2