Extracted

• • Target

    b0ce0faaceee81d7e2324833e03695af69a2b0d7256d7be0bd722724b9d14147

  • Size

    4.9MB

  • MD5

    3d3967fd878136fa321428299e208192

  • SHA1

    7717260c38becb6c359dd677685e8e34727eb420

  • SHA256

    b0ce0faaceee81d7e2324833e03695af69a2b0d7256d7be0bd722724b9d14147

  • SHA512

    3985193189f0f9576243d5a03af297f6c92aa477df6f63051115e35f6764dd7b3921c72ffc1848d48557200452666922450596f1b6129a5354ccddeb8c3bbcbf

  • SSDEEP

    98304:mpeG+edcRh3CLrfyFXITePnCnrsSc9QJZLahn1KiSYysf1kRiBYz81+ZVB:bG+ic3S3fyFXCeur94QJZ/iSHsf1PKzN

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2