Extracted

• • Target
    f7b0e6eaa830ff0db16a5a1fa2a2419b3f452e071b208fb5abc627b8b1c59d0c
  • Size 4.4MB
  • SHA256 f7b0e6eaa830ff0db16a5a1fa2a2419b3f452e071b208fb5abc627b8b1c59d0c
  • MD5 ca5effefd66efe32b020ad7e50a1362f
  • SHA1 60a026e540a5f7d19e58d225dab1b319d07bc416
  • SHA512 62c4cdfd581fb1e80f09684adeba061af269a3ee99fc8c4f99dae18938fe3e8c4299642f433c0169e6c9aa5118d31093469548f0e8e2bdfe709fc3b54addca66
  • SSDEEP 98304:myZqlCXYBkI4yRt9DKtXrK8CD54O7V/WYYonMXpydY/L0jta10yyx:LuCXPNiD628bYTnMZy6/L0Qryx
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2