Extracted

• • Target
    05f9c3fae9b1f08fc1e5822ae61ee2c0.exe
  • Size 4.8MB
  • SHA256 5a2322d7f478af9aac39e37b68082d6e7bcba23b0a1b67aa0c9ff6e3c00106f6
  • MD5 05f9c3fae9b1f08fc1e5822ae61ee2c0
  • SHA1 87b34df6e2bc8fa45c79158e62f36d7b345fc6eb
  • SHA512 30e696872205c7a588d305a9ed67cfa69aca65b7f9501ec52a0da34621bc20bd11979d3cf55079e8af7fa8052f2817817388410be33f7848e0a4f7fe936259d9
  • SSDEEP 98304:m55c5gU7QtFIat6Bo1NWTKWerUbbva2CLTWOwUAb+wfGDf+26c:8DU7WIaeEr8ba2CLqforJT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2