Extracted

• • Target

    1c9e36b4d27228bcec7c18944a66270a93c8e030c911bf8ff07b30d7fcc769e5

  • Size

    4.9MB

  • MD5

    1474c5d842d1a4ba2c592930a42c3a80

  • SHA1

    223db78270bb75a60d47586974c97bfdb0556ba1

  • SHA256

    1c9e36b4d27228bcec7c18944a66270a93c8e030c911bf8ff07b30d7fcc769e5

  • SHA512

    9ac4c9aa4d182fa5abb039e04066535cd43b58f2315b41127e116efb827e78dae146516818d42e7b6d8beef17a6f55a234b68c7f9457e65e02b059117785a7d4

  • SSDEEP

    98304:mln9CPsrHDI8ksDtHnEvHohXESl1QGMFFEit915vL5Jk2IVMJcll:MnkBJsdnlhUSl1SlUfll

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2