Extracted

• • Target

    f2c9155cfe4489096e511e436be5940f6f94612f91c57021a74b4be3cbda2f9a

  • Size

    4.8MB

  • MD5

    abdb165243c40316d3d229de15b88d42

  • SHA1

    9491f350213b843dfd4287eba4deca1db91c7e60

  • SHA256

    f2c9155cfe4489096e511e436be5940f6f94612f91c57021a74b4be3cbda2f9a

  • SHA512

    d5d9298b358cf89379b0f1520de10fc3ff4f4c0a48ab3056b937f273700fff1488d82f6b4c3b2b2abdcaeed432f8075e6b67f924d82fc7346339220280fa19ed

  • SSDEEP

    98304:mHdONqLtOwBwcKw3T8Xz4153vdwq5hkcCJVZ17tqdHaaRbXsk:oiB8KwDc4P31w9cixJqd6ad8k

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2