Extracted

• • Target
    7e3ef634f1419db8daf4da8fff8ee0bd8375448adf1978addc76e8ee9176550b
  • Size 4.4MB
  • SHA256 7e3ef634f1419db8daf4da8fff8ee0bd8375448adf1978addc76e8ee9176550b
  • MD5 3fa8b0180d86dc539032e28969e86d04
  • SHA1 74a52167050bbeb79a0284b504628dfac1d76c7b
  • SHA512 6fc841500ea1a76800de386a3eebbc346d5555ff0a5ba740a983df57ddc34ea5588d6b1a440aa247f75a9904c1fdb03db05a5b3ecadfca0724902e4e7fac9668
  • SSDEEP 98304:mwojkAPecEepdwh5bfZkAwH9iF/AlIKqbAx3z/QTcriyUtWhM2hEJ54rHBX:9mkAPeSiZk9zqbAxcTcriyqW22hEJ545
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2