Extracted

• • Target
    653fef3d5a01ff6c6d2730be37faf50b.exe
  • Size 4.8MB
  • SHA256 a10926a22bdb4ab1419c00e04b266d001c60752df6b7d320380c6bbe284571e5
  • MD5 653fef3d5a01ff6c6d2730be37faf50b
  • SHA1 8e68d741e96756d8b1d58cfe0d1584c9f0c81aeb
  • SHA512 68ba22c75dfe43ea303aa4217a1d81ddfc7e8e5b6e00b8abcb093bdb2db7d5402db71358a5fd147d022c3cc264f37d90105dd210debe9b547a20f0e1a2efc404
  • SSDEEP 98304:mSjJeiLrZa1cPEdJPsckWtd+Cf1LBdW9CGyWd3lno/g0ZKC95EMiBga2K2:njLPsdkWtd+iU5yWgYP26ga2z
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2