Extracted

• • Target
    b4db07a8cc398e6d31b33658b1f0635a44ab27d52f7afcec6bb34d59717e7c45
  • Size 5.4MB
  • SHA256 b4db07a8cc398e6d31b33658b1f0635a44ab27d52f7afcec6bb34d59717e7c45
  • MD5 72e0d77dd9ad1a343c454a833f641c27
  • SHA1 75a8f8e542e50809c6819979103b99952a1d532c
  • SHA512 448a301aea0f877c25480e38f36d61e8c8db9013cba9ae1d3493b551abc32ebe9521661f5090defd8b28dff6788a9b92291dd2893e05671e3a91c84d1a1ab779
  • SSDEEP 98304:mvLC6jJO0bg6p6X/ezR4Gm8gcp/2vKnD6Shx+DfeSEfmWfTImfKKv:uOAFVp6X/ezGGz9SKndhsfVEfmWf0mCU
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2