Extracted

• • Target

    0eb68dd50c83db7df7a474ca0bcbcea41dbb854c0f9b89a8ddf666d350ddd552

  • Size

    5.0MB

  • MD5

    bc1daf6bf373ff4352dca4cf2363b694

  • SHA1

    844e970496fefbbd9a3a5a22c35bf0da97d91b09

  • SHA256

    0eb68dd50c83db7df7a474ca0bcbcea41dbb854c0f9b89a8ddf666d350ddd552

  • SHA512

    f96a2353542f5c9b07479e1621a5bad6014e052b61ed4423e65d8d0310c79ec0f6a008a7b00eeb5104ac46b0282ea31ebc8e7989b1a8b4d7b7a855d27a8a72c0

  • SSDEEP

    98304:mGXq9UoyHs5hQsg0E2B8ntd4C/BST5cAxmCowx8QBMPC0YnnJJajE+Oor8Yq7:/XqCTYh9g0/HSBStNmnwxhJJJanro

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2