Extracted

• • Target
    06d199a8d787804af9649e0ceda8f1fd44bbabc24275574071deefe62b64f3e6
  • Size 5.4MB
  • SHA256 06d199a8d787804af9649e0ceda8f1fd44bbabc24275574071deefe62b64f3e6
  • MD5 b671689851cdbc231fe961667ceb7cac
  • SHA1 38cdd561f0f6e4a805300545f6a071627e581214
  • SHA512 426b1708c3e730a18ebac7c007f5f24f7f61d4795dfb96b0ac4c98022a06327f303989ebfee0d810fe409b2334cdb36cd233a72dd9c10f42fe9a8e489db0453f
  • SSDEEP 98304:mCQKQ10S5ZQwu4NrMSdrjahvThToDJBnfqhk2EWgHKXAa90C3kUUExW0O5cM6:VQKQN5Z2mrFwbtorfTlWgqXARC3kULxh
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2