Extracted

• • Target
    9b6a3eb67f666120885a27717f6998d6e4175343dbde8c8327a1e5619ed0540c
  • Size 4.8MB
  • SHA256 9b6a3eb67f666120885a27717f6998d6e4175343dbde8c8327a1e5619ed0540c
  • MD5 6a20cd124e3422b93ef68806e86f495e
  • SHA1 72eca2554bb61aeb120717f6895879fb7447a7cc
  • SHA512 e9e887687731ffb771bfb961ee7f0888a41aa3062642fc5ceb46ae355a2e8ec4f86a51e56af8552dfe781d0cc469d648d9ba4a2bdc9f7c7f360fd68f8b2c1c57
  • SSDEEP 98304:mDf3TjTpKsqbnL619YwEJeAsfHzLT0na4JDScFTpPK8xh9Z+DIQ6:WTjtKsqbu19Yozv0na4kWn9ZsIh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2