Extracted

• • Target

    2fb911b5ebee2ef24ccd1b60ecb86252de10324c2a9f57fa28ac55ca5037dc41

  • Size

    4.9MB

  • MD5

    3bb2b9b6ec21a234ba79b09f428ec153

  • SHA1

    b4dce8d69b85459ccd60454baf6bea53aee7097c

  • SHA256

    2fb911b5ebee2ef24ccd1b60ecb86252de10324c2a9f57fa28ac55ca5037dc41

  • SHA512

    31637dee0ec556d8dcaafd40b722ead327b8948a117900529d0a57e0e3152def09471b92f5d0373ef74af2c8e6da5d966f22787bddc84b7061485e824ac449cb

  • SSDEEP

    98304:mcZoYqDs6F8qEiUcqR4dVhVL36h6d/QBnWJbEbUHAGUw/Dq9sNB0FbXsk:dZoYqDs6lscqR4dVrVd/w2HAC/Dq9sNG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2