Extracted

• • Target

    31e01939d709a165c73f7ed49d034ad711073b78915d2f8213e6dae66db51eae

  • Size

    4.9MB

  • MD5

    2c831fc5c396247c3868c8cef5806eff

  • SHA1

    6df88f14742f95e73bf50d67829ff7ab6cf4adcf

  • SHA256

    31e01939d709a165c73f7ed49d034ad711073b78915d2f8213e6dae66db51eae

  • SHA512

    154f3f205e6b95a652f76b05512a968fa813c3fd695c778eb1fe9a9a4b3d0b7dbd0e35a9160de69b6b8ae7306a780bdec0b38b12499840e3ecaac125776ef326

  • SSDEEP

    98304:Cq2rQod3uC37lkXPQUGNO8ouxAZOJGG99QSVbhvRYUpu1CeiR+296TxQxFE:GQq3uOYQU18ou6ZOJGG9fVbtRHpuU7Rw

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2