Extracted

• • Target

    9a21f506d318c592e4b533dc934fc3e89ecac5c05cd5cc950df3070de0b3c16cN

  • Size

    5.6MB

  • MD5

    44d5b3a0eb4601fda50762cb15a1a420

  • SHA1

    03ba22505ad82f065250f2763206f32b86cd38bb

  • SHA256

    9a21f506d318c592e4b533dc934fc3e89ecac5c05cd5cc950df3070de0b3c16c

  • SHA512

    e033dd1813dac89be891ada7d8f922335d76b6c92be224319f0bfbcdaf383376a0382a6b24cfbf07737ec0351163ec9eb85b4712910cbbeadce54aa82155c366

  • SSDEEP

    98304:/iRmxZFsM4kxzDcT+GcY437KvDwEHuujlsaSzsC0p43MpQdZ9nc+fsCb+oSBAON6:qRm1syxacY48eda2TMpQdZ9nc+fyhNjG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2