Extracted

• • Target

    c144d7a9c370793b8a486c76692f219d14136e65366ae86c93a49c341831761aN

  • Size

    5.6MB

  • MD5

    a9a597b36844c087ac8800ba1ab024e0

  • SHA1

    985a6f2adf49f91411eebf2168a772f9893536c2

  • SHA256

    c144d7a9c370793b8a486c76692f219d14136e65366ae86c93a49c341831761a

  • SHA512

    61e383829db284083a56f2831f2ad980a1e96ab695dba64b93763291e56b5f37285bdcb89626739a9b9b0272968a9fd66e398f42116960146441542d00b4ea41

  • SSDEEP

    98304:7iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:eRm1syxacY48eda2TMpQdZ9nc+fyhNjG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2