Extracted

• • Target

    292c8faff82015fd30f2c0ab1a36f238d25d2cb5728db3f5b1d085d359d3b93f

  • Size

    4.6MB

  • MD5

    81112fcc5bb3c3e3728a1eaeb3a37fbb

  • SHA1

    0536467a4c8b205f33921e373f803f6b53de0743

  • SHA256

    292c8faff82015fd30f2c0ab1a36f238d25d2cb5728db3f5b1d085d359d3b93f

  • SHA512

    79498d9d9b75f486bf7fc65859c2c1b8177efb7e27c7b208a6c935d25e8edcdac96514cf4306558b9fd552bc478320c3be923dc200220eea37e7c9a5279c8e3d

  • SSDEEP

    98304:m3Bg7ptfy4Cj68dXB80Oehw4n8L+LzHUsYVvuq4CzjEzijvn+/:UBopE4e68V6ehXn8L+nKVGSqijvn+

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2