Extracted

• • Target

    a9b9ef72081e44b4c8447099b46478d57b2462343ae0cab23064a39b297a968bN

  • Size

    5.6MB

  • MD5

    9b77b5f27eb00703de546ec7170a1c30

  • SHA1

    b0ef414513331d94efbfeda0f79ea8a52b25d666

  • SHA256

    a9b9ef72081e44b4c8447099b46478d57b2462343ae0cab23064a39b297a968b

  • SHA512

    7fd8ef4893678f73837d8e0b62b1a018b1c054e8418d78d8eecf678aaa4b42a887a6cff412232aaeff098e48789d088c7370aeb7fe9b499bc130a9107e494c50

  • SSDEEP

    98304:XiRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:yRm1syxacY48eda2TMpQdZ9nc+fyhNjG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2