Extracted

• • Target
    cdb3c6dc6768edd8a4be613227587f9e405dcd4476502db1a55f9573bf8bcccd.exe
  • Size 4.7MB
  • SHA256 cdb3c6dc6768edd8a4be613227587f9e405dcd4476502db1a55f9573bf8bcccd
  • MD5 7359389b08ef0a1edc8a8219c6c510d3
  • SHA1 4d1e576632f12eb872cb649e43b136b87ea57fb2
  • SHA512 d3bb3d194f6c2072ecd5f8d3ed824f384456dee490c015d0bd0b9964a1dcdec0a069adc9cc060c80c42789212f8d63ed6a45d8fd4ec92840d651f23c52b6f02f
  • SSDEEP 98304:mD4FtPE54D2BwwDKgWedssxDtAeozfKfkG82BUcnw0+SrlYZTiNWb:o4fPEY2GwDKgWisVeo4kJ2B4I0iNWb
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Detects executables packed with VMProtect.

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2