Extracted

• • Target
    5af279a3801d8f448ae2888ea1cdecf81142cd89b5bb59a3b9107eb518b3d9a6
  • Size 4.7MB
  • SHA256 5af279a3801d8f448ae2888ea1cdecf81142cd89b5bb59a3b9107eb518b3d9a6
  • MD5 a3000003d3f94b0583fb05be70d7562d
  • SHA1 a3a92ed9f3d07caa92dbca111019ee1d863ea913
  • SHA512 e61212dcde13d03ef1f663ab5b7d014bebaf1c206a45e0b070aded932c5003a06fe0a4c26991310cecae81c9a376b952fe80f1027dc79c592f25bd5ebe41e9f2
  • SSDEEP 98304:mUAkeJc7/v40QM64cws/F8KkMcwo0Ro022BY+Kxx6nS0sL7vAlZJKjx:sRu/+N4cwsttk30J22BHK6nS0CAlZcjx
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2