Extracted

• • Target

    ae0c0d23ac92713e93c76a6107c24df9402876491ac4add9586e366c069f66d3N

  • Size

    5.6MB

  • MD5

    4e2e959519faa889cf163592171a58d0

  • SHA1

    41938a98966ff42e8f748cd7049154c61a09f7f1

  • SHA256

    ae0c0d23ac92713e93c76a6107c24df9402876491ac4add9586e366c069f66d3

  • SHA512

    2e23fbc3ec060a2460bba37b243cbd83b7c2952e77b1093d8f1d6b03304b3debae4bd33f321a82a478c91e12924317ac0197ff2d23c7354bcc25426d53d60391

  • SSDEEP

    98304:ViRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:MRm1syxacY48eda2TMpQdZ9nc+fyhNjG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2