Extracted

• • Target
    06c63f3f0dab3402b104299fb2ae56836a5a25f7b7ce0958d86816a1c68e86e2
  • Size 5.0MB
  • SHA256 06c63f3f0dab3402b104299fb2ae56836a5a25f7b7ce0958d86816a1c68e86e2
  • MD5 e96581c91b2de09396be5677b215918e
  • SHA1 fdd65d5610e215b4b8e61d5a372ea97ce12c0484
  • SHA512 c8218f55637fad8cf521dc09903e9df9a0c65c70af0cc740072dc8958563ffd9eac848cbf02b9bb974cbd3a51eb9c7167ad34d9c5c1fb70b5c8ee8ba9d88f631
  • SSDEEP 98304:mUkyqyz7bV7Mq/swetYhztRWcnFm5DrZ/KP3u+dCdIFvHNV7L+o1jV7nH88p:6o3VnzetMXWQO/oHCdI1HmYVbp
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2