Extracted

• • Target
    fa18cb656c819bbbb3e28361d163228833fcaec39a173fb1d7a79559f3ce0b7e
  • Size 4.8MB
  • SHA256 fa18cb656c819bbbb3e28361d163228833fcaec39a173fb1d7a79559f3ce0b7e
  • MD5 a40cfcf41cc52dc4cc07746c2e114bc7
  • SHA1 809210d9c24835ac09fc663e266e0d174bd9db25
  • SHA512 b3c3325be688d13f2922c13aff208731a5d0c962d9fda2c9eddce0a3d9419649e70e74e44203be0b3937a2901c40873c6d4c2ce394389d6e30e97bfc06e08550
  • SSDEEP 98304:m6sH9MZthQUk6CDsQritBHPZmZqc0Bx2dwe7Zom2vE2K9glIRW31HX+6pI:e6ZzQUk6emBfYH6spOlvlO6pI
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2