Extracted

• • Target

    d6c3165b405caeb9bf8c7f63f1486bc0fd0cd6ed4800c9cdb0672fa1d4ce202b

  • Size

    5.7MB

  • MD5

    3ceb7fe818ac5bb5a88b9295c905a01e

  • SHA1

    790f847d86b0b295617d52914aaa7e00f7efd10a

  • SHA256

    d6c3165b405caeb9bf8c7f63f1486bc0fd0cd6ed4800c9cdb0672fa1d4ce202b

  • SHA512

    795e689207b89e527ce544306f77b38b1b1106eddd3fcc64e4d2773364ccc0a694e52eab108442b8ba24641f9f54181fd30994d168ebc7d22381895948a19957

  • SSDEEP

    98304:mEWvbSTB5gPOJrdBqwXz2UmKAEGTl799w8amKWBEM78TmUQV8/JpliiG0BC9BhZ:e+TBCPO1Lzj9mKAEVzmhByTm98/7liZn

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2