Extracted

• • Target

    b4db07a8cc398e6d31b33658b1f0635a44ab27d52f7afcec6bb34d59717e7c45

  • Size

    5.4MB

  • MD5

    72e0d77dd9ad1a343c454a833f641c27

  • SHA1

    75a8f8e542e50809c6819979103b99952a1d532c

  • SHA256

    b4db07a8cc398e6d31b33658b1f0635a44ab27d52f7afcec6bb34d59717e7c45

  • SHA512

    448a301aea0f877c25480e38f36d61e8c8db9013cba9ae1d3493b551abc32ebe9521661f5090defd8b28dff6788a9b92291dd2893e05671e3a91c84d1a1ab779

  • SSDEEP

    98304:mvLC6jJO0bg6p6X/ezR4Gm8gcp/2vKnD6Shx+DfeSEfmWfTImfKKv:uOAFVp6X/ezGGz9SKndhsfVEfmWf0mCU

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2