Extracted

• • Target

    2c2cf3666a7877db2d9baef024158e943c5b47a19fc83506fe7989aa0cd204d0

  • Size

    5.7MB

  • MD5

    8e236feab23049c31f09c0128c80a9ec

  • SHA1

    14c74d77a91d9419858759b0d32d78496e4de551

  • SHA256

    2c2cf3666a7877db2d9baef024158e943c5b47a19fc83506fe7989aa0cd204d0

  • SHA512

    de49861ed32228be1c306b3883f6311ca8681161698ccc52cd108a90543b51282da9a607b95467d73bb32061e6daa7124088c33453d63e0087d19fcefd5c6086

  • SSDEEP

    98304:my7wm5UFkIPJYZVJ6EidbfY2FVscmBgpHg6Fm9PtPUdJ58z27AF4Svs3VbuYq:jWzaEEiVfa7BgpHgCMFsdJ58z27FQ

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2