Extracted

• • Target
    058f878aeb44622da5120abe47ef4657e21fb8728194bfda51f88e2f460b4669
  • Size 4.7MB
  • SHA256 058f878aeb44622da5120abe47ef4657e21fb8728194bfda51f88e2f460b4669
  • MD5 f16ac6046e4aeaa865c5f5b5ab08b20c
  • SHA1 ccc05e90b767f3b00c05572126720379671fc353
  • SHA512 9f1ff01bffe2a48a431af88189479e5a403cee841525a0e3a87bf17f0c2a65a78cff9e19d94d27530f06655f29da0ce5e3d00cec89677c42b791143f0bf2fe74
  • SSDEEP 98304:m8CjQl/6z4k41NabgBuW9qRSZoX33ZhEJkt3DbWImLnImpi7:pG4k4XabtSkphokRZmbPi7
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2