Extracted

• • Target
    e7a0a134d787fe5cfbc5b8deef0e5fd4f9887b3c5ef037083d9ade058972e10b
  • Size 5.3MB
  • SHA256 e7a0a134d787fe5cfbc5b8deef0e5fd4f9887b3c5ef037083d9ade058972e10b
  • MD5 cea5312c0313b54e04fa613bee461bb4
  • SHA1 b452ac365118898166fa5710809af9f7ace8522a
  • SHA512 9a1f539b9b1b9dfc118c55e17f37d7be9f32846f862c1fb306fb2aa9521aa72048538c9b597d0d4714f3ea036fecb3a752a775b163571a602e14fd3486c5aad6
  • SSDEEP 98304:mcCZ/VRqsySNn+yz+SKyp2Cy32V/0nBbvTwRwd56UNL3655He99T/+n7N1+oPMct:AZCYt3SSKyDHqRvTwKH6U5qqT47KW
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2