Extracted

• • Target
    2a29d26bf0cbd899c91002cb7548d02b219d9c22df657d3c0e30d55b6f323db5
  • Size 4.7MB
  • SHA256 2a29d26bf0cbd899c91002cb7548d02b219d9c22df657d3c0e30d55b6f323db5
  • MD5 239af0431aabea6355e9ebac1d4af45d
  • SHA1 e0c4d7ab06ae0cd33b9eccf8ddf0859a86c1fe21
  • SHA512 0dd286a0abb29d9fc09d9570617edb59b025ac0a23e47095af44bb61585b3fe8f3e7e826fce7d09ac99c4f23f1055755ba6bba26c6b45497e204e3932fa7b93d
  • SSDEEP 98304:mn44gn501NAxVhjDHdjzptw87R5Jg1RC7de782wA0bXHRmzx:f4QEUX/HdZeeS1RCj2w/bXxmV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2