Extracted

• • Target

    f8a2ccca7169f8614f391ef10b6d2aa983645dfe7c57e2465f8c69e5b73c9897

  • Size

    5.0MB

  • MD5

    49db2b47753414ac9baf0f7e8a6b7bda

  • SHA1

    b651a8de04f7d939f7d50322e8adeea591af484b

  • SHA256

    f8a2ccca7169f8614f391ef10b6d2aa983645dfe7c57e2465f8c69e5b73c9897

  • SHA512

    e8d3b0c4d9b3e5c65b0710318c774f5c6155db92dfbd9aa8b7d9be9840da7c2972f120ce05ba39b7e4a8f4ceaa7de164d6b4a42965361acda50dcc9c73951aa5

  • SSDEEP

    98304:mPGc9feSX5Hg7oteI8QeQD1cJrXlqV5Fu4u9MXJbQ6gOKdXA9ya7GOIb:879LqQrc1XAk4u9MZbYO4XjOIb

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2