Extracted

• • Target

    f7b0e6eaa830ff0db16a5a1fa2a2419b3f452e071b208fb5abc627b8b1c59d0c

  • Size

    4.4MB

  • MD5

    ca5effefd66efe32b020ad7e50a1362f

  • SHA1

    60a026e540a5f7d19e58d225dab1b319d07bc416

  • SHA256

    f7b0e6eaa830ff0db16a5a1fa2a2419b3f452e071b208fb5abc627b8b1c59d0c

  • SHA512

    62c4cdfd581fb1e80f09684adeba061af269a3ee99fc8c4f99dae18938fe3e8c4299642f433c0169e6c9aa5118d31093469548f0e8e2bdfe709fc3b54addca66

  • SSDEEP

    98304:myZqlCXYBkI4yRt9DKtXrK8CD54O7V/WYYonMXpydY/L0jta10yyx:LuCXPNiD628bYTnMZy6/L0Qryx

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2