Extracted

• • Target
    c5aac34fdfe64484f966ea6a93aa6092a895779c529eab3a29022b9fb3174ed6
  • Size 4.9MB
  • SHA256 c5aac34fdfe64484f966ea6a93aa6092a895779c529eab3a29022b9fb3174ed6
  • MD5 d048f7a2961e3393b108a16a810ed81f
  • SHA1 cc733c07d514e739a714f6785e4e5108593fe956
  • SHA512 de6e0e37d104595cc36b77bb278fc05191fba61244a9810ee6e499dd8ca368016cea4a353e25b3d26265edb1d9369ddb6503a218765c3e22e3d492698482d60e
  • SSDEEP 98304:mcu1GtoQa49UyWDJXz3IlGMet1yE7f2AkavKiFah3pLX8W7/vbXsk:o1EdSJjYlGDNpfFuF86/D8k
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2