Extracted

• • Target
    abd03c8a4bbf0e66b61964f1b3f2dedf9d1e9c3a028ce9823a53918e38a0a47d
  • Size 4.8MB
  • SHA256 abd03c8a4bbf0e66b61964f1b3f2dedf9d1e9c3a028ce9823a53918e38a0a47d
  • MD5 5becf01c4117b3ef5f9dc2b300d1a6cd
  • SHA1 9cf9f489d76b68390eaa3abdcc8b5fc3aa780fab
  • SHA512 5306b924d73146a9be69303cf6bce7620365d87922223dec1eb2df61cd53abe78ecb00de11d45336e18df391c018caa195a7831f3c4de31bc7e3f952437294eb
  • SSDEEP 98304:m1MzvAmHb2DjMwHPuMacnSQii4FUMITFB0p8yqovQN33SkkQh:Qtm721vZSQixjIkqooN35r
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2