Extracted

• • Target
    71f4601b51274cfd5dfee83da432a679e48f51dd762b4d8bfc6a19a502c6a2f3
  • Size 4.8MB
  • SHA256 71f4601b51274cfd5dfee83da432a679e48f51dd762b4d8bfc6a19a502c6a2f3
  • MD5 e6ec1657e7b8a6fac096ab94290e6055
  • SHA1 0b5946e927adf740015af03b40e317f6a60b0aba
  • SHA512 4b941366c3f9e7856a2db5c9ffdbc893318c3643cdfdeff776c58f6cac5cbf6833abdf8c33272f40d9c69333fb93d68ef082de3a3cd86adc431039dfde408d1b
  • SSDEEP 98304:mBE0LJzxolL/JUC28s7YfCnKvEDAbhhgOCp1jTVBcD7kM2NzR433R8DiNm3i:fwFxoRxxsAbCnOCnHzNt4R8DiNm3i
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2