Extracted

• • Target

    dd6f1cc562f34ca154ad8e2dd27033a0fa59d039089308da6dcfe319c19e4a52

  • Size

    4.8MB

  • MD5

    8e580b114979a26dac87db0e1f16d0c1

  • SHA1

    625f7a428f022414e6f41d4a173c416459cb663d

  • SHA256

    dd6f1cc562f34ca154ad8e2dd27033a0fa59d039089308da6dcfe319c19e4a52

  • SHA512

    b33b63091520e62a51c38b3c1c16ce52c46fb31db615865586753ce7a44ee9fd43881e23bc81b0082024cd623ba91e371ae34eeb1a5bd8d7fdfd45f3a41a7004

  • SSDEEP

    98304:mY/fkCLhx8r3evAeyscSgNUgYLL/SR95pg8Vu7a1XhsRnUC+OMFeJg:l/ZzMOvAerz1gYXqr5pgW7MnUvTr

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2