Extracted

• • Target
    3845142411672cadb1668778ee5da60b56acc020f1e01437b16218f7dfe00b01
  • Size 5.0MB
  • SHA256 3845142411672cadb1668778ee5da60b56acc020f1e01437b16218f7dfe00b01
  • MD5 78d6c42739d752846e5a70abf7a68912
  • SHA1 62a774d4b384841490d432266ca793bf4f17ecc0
  • SHA512 82e7f40132a9a9154a9aa5f01e2e491adafb5c63181d16f0bbf2159a65fe3f0d2a5cfb7f72431629ef74d8910e8107cc365c384f64c3c8d74dd6fa07651f6910
  • SSDEEP 98304:myS0WzJL3PpnzhLR/MrTa1jiGekCl7nsfY3mXtunXUkO7BuwoEbN43ZglkfbXsk:XSBFbLR/WeRekClbsfYg8t50bW4kT8k
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2