Extracted

• • Target

    a1f2c2e3db5ccd028a00f1ffd2ac45bc6fdd0d5761f220bb9e0cfe33f5e1e23d

  • Size

    4.8MB

  • MD5

    c5160cb1a917f846b13fd82958cabf07

  • SHA1

    4bd5e4faecdb8cd020a8b3d37f3c566075cd2de4

  • SHA256

    a1f2c2e3db5ccd028a00f1ffd2ac45bc6fdd0d5761f220bb9e0cfe33f5e1e23d

  • SHA512

    ec980f977b0ff25e59e9668a98df7f399f948cdcd71455353534eecc78021e8d95de1008a95bd26d4ad64e0bb8aa1b92f8f7c18ddaf2fa29369e47ea274da5ee

  • SSDEEP

    98304:mt6DDhBxMG1P2zkOLm0N8kJbKCl3GYwtoprt4KMnSeBe69uW7ydozlKcFbXsk:8I9Bue2Ttb5putopCKMG69PDzh8k

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2