Extracted

• • Target

    a222d9ef359fbc9dabd07570d38d368086b6fd682a8b1590fc72a240f0f2fbbd

  • Size

    4.8MB

  • MD5

    20b715255948a66e9c034bbb86e34e24

  • SHA1

    295c9b4a35dd22c10cf14b1b80939fd3bf8a6273

  • SHA256

    a222d9ef359fbc9dabd07570d38d368086b6fd682a8b1590fc72a240f0f2fbbd

  • SHA512

    a71aaf3ac80420761cdf0a75cdd4cd636f814540ca1155a17f7e22b2d68d6e9c48c61d1ac865aa90af5471592745deefb170a3459e7a5f52faae8a03bef91ca2

  • SSDEEP

    98304:mdvtdkxcJjbuUdWlL0NAwBrnx7h0nI4KcNNcAyIn0dn1Ufizm3ASzT:kvXkxcuUd6qjBrnAnnUAyIDhASX

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2