Extracted

• • Target
    1f610e1978c945967d5d41027c25d715762eb6754c99575074a26261185f5d77
  • Size 4.5MB
  • SHA256 1f610e1978c945967d5d41027c25d715762eb6754c99575074a26261185f5d77
  • MD5 aa156103faed699d4703a9c33f94cc48
  • SHA1 d9b127750355b256c4de440273072e8c121dc48f
  • SHA512 27983fec050508d0e6be179784db487e32970f78fb9f18c7c3ec72b74f56d702c23a97b806e0f09e003e157c96f5d35d17a486e36b459e5e6abe9949d2a13e2b
  • SSDEEP 98304:mOkTmlF4WZhFiADgsiBWeTkqFHoDfNrJ1i9FFPuh4r0XkF:gOaATJUpDTkDfdXoHuh4rgkF
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2