Extracted

• • Target
    ae44e03357f4cfda170aa96107881790cb5035860ff5c87c6e5aaaa33f02fd74
  • Size 4.6MB
  • SHA256 ae44e03357f4cfda170aa96107881790cb5035860ff5c87c6e5aaaa33f02fd74
  • MD5 660aa6e280a83499813cb7dfa24e337d
  • SHA1 f93b595d27ce43679a10982a4584f82ec2e67995
  • SHA512 70c06c76979a98654c8c8dd5ca5d862b8c5683120f59e2d476083249f16fc4ff3532e4643ffef1bfb4921b7eb4b8159a81f7d3930a574e467f8b9d275fbfc32d
  • SSDEEP 98304:m48DWBBQUnEv4oRQAJlEBO6eK+YQmQnhsNHbwe3+XGK:OHUEv4tAJlEF0YQmQnhsNHuGK
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2