Extracted

• • Target
    717094f9d9b62b89ac60f7a696856b1114c54e7d519ef80e5e32d4284c64093e
  • Size 4.8MB
  • SHA256 717094f9d9b62b89ac60f7a696856b1114c54e7d519ef80e5e32d4284c64093e
  • MD5 99a9c6a07e1c9e5a9fcaac8426b786ae
  • SHA1 49c94499d6c7a963e3e4785010bd8a8de3e51bbb
  • SHA512 600f504c4dfa25853a1f052dd3f0b0428f135215651de7e583ed0d900fd7f8355ed78a434649dde386bf3ddb572117d369b2ae59b5f32ed9592e3ef9c1f9450c
  • SSDEEP 98304:mhJbYijBuXJSNvoizfa3cf6di971pVnK4YVJefbZ10SP1LP/QwsK:6JUSNv9zfa3cV9pnZ110SP1LnQhK
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2