Extracted

• • Target
    fb57459da8eb5ff8ee3b26602abdda7b7fdb8aa1ba6205523c80cf36f15a062c
  • Size 4.9MB
  • SHA256 fb57459da8eb5ff8ee3b26602abdda7b7fdb8aa1ba6205523c80cf36f15a062c
  • MD5 59e5b3b2ac82702dbe2820deccd84b91
  • SHA1 9fb8446b3b6d7db83c9e2103278de975181d4d7d
  • SHA512 ae1bd9a54367471e4c2a86bbb3dd4849ad636ddf1d64a90e27196125b25935079f3558e1629c14b81bfc2b65a4936154bc183168e068ab0a9c2e23454235c6df
  • SSDEEP 98304:md3LFUQzaCwNZhykrddacsgpIPX7dnqnNa70kcxT4XFIT0e86HYV5E5P3CgTu:oUlCwNvyk5stPrp+Na7x9XFITNHd4
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2