Extracted

• • Target

    28ccb0eebef6ea17391a29a0ae3b40352f3abe6b422445da493f85c09c53a8b4

  • Size

    4.5MB

  • MD5

    797c98bb6f7c01e7bcac1f029bd9b8c8

  • SHA1

    863c074c36ddd6fa91d9c2cdcb7b779750f29f5c

  • SHA256

    28ccb0eebef6ea17391a29a0ae3b40352f3abe6b422445da493f85c09c53a8b4

  • SHA512

    5f7137e2cb5b033e3590882394461897703a9ab82a3d4bbe47c3d11f055f1200d627d08a8aa567faa397b11cd6209c31436328f90a5c9b390e01ec371e863e33

  • SSDEEP

    98304:m5f0ez0hCRHoKh0oUvpPZmiY8B5zmnOU+uUkD+t2bRj/Y+RqZ5:Q0A0hCRHXrUdZm3W5zmnS4VjAqqP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2