Extracted

• • Target
    0e0e2b7f1f53858f49e5708f752f8f883e1700161a4ce5d982a29126dad65284
  • Size 4.8MB
  • SHA256 0e0e2b7f1f53858f49e5708f752f8f883e1700161a4ce5d982a29126dad65284
  • MD5 10b82b883cc6d1ae86143946e2b37ab3
  • SHA1 6a055a833cd92ebb3e175b01456c8f5a674ae08c
  • SHA512 c62a75dec46a4d8605ad7669b429fa641fbe4c150b7b67496d1064568f4679b0a8c487ae7a95ba6fcf04d19d429c1e3b6eaff8a01ba9eb51cfc383eabcf11424
  • SSDEEP 98304:mPpmew7ppHwJxJGVlHfwTLDNXKEHg9LvjjCa0cQi4og5G4LnmcHe/9hI7aPkR:amew7qPyHyX3HeTCdPi4nU4Lnf+rhk
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2