Extracted

• • Target

    945103d43a3b4db2fdded297ec9625e54f4d7f494aeb27280e133bac22389673

  • Size

    5.8MB

  • MD5

    875191f204d65fba87578811a903b55c

  • SHA1

    f5f246da6aa53095f3fd1cc5b798af0f626464f6

  • SHA256

    945103d43a3b4db2fdded297ec9625e54f4d7f494aeb27280e133bac22389673

  • SHA512

    18319a7dac083bbacaff0d23e6d04c2f45d1af1655830e063102b70789c8ef065e824dfbc2d5073edb7884326faefdda813cb0bd7135e57722d9b383f65ef84b

  • SSDEEP

    98304:mat5MY7lL4fOoffsRGRS2PJrHKLQ/wAzRQwLn368K3BVKQI+fkrYtg91qSe/fC:n5MqBeO+SwJWAza1RVw+fGv1unC

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2