Extracted

• • Target

    47d7bfb8b5ca3cecd19311eb43623c7de17654efd54a7e06b5d610c0efb98a73

  • Size

    5.6MB

  • MD5

    852716a2d44e0122b5ce700105964253

  • SHA1

    48fbbc7796850d5edb57f11378a67c10270a8d38

  • SHA256

    47d7bfb8b5ca3cecd19311eb43623c7de17654efd54a7e06b5d610c0efb98a73

  • SHA512

    efdf7f5393a7532f6772b7e68a644b691256f69f3303d11022a39fa2e9dabc0fa70ad932713357836aed2d0e2d8a4fbd425d57fd82b4306141e4ba90f3267aad

  • SSDEEP

    98304:qiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:/Rm1syxacY48eda2TMpQdZ9nc+fyhNjG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2