Extracted

• • Target

    f86262d00d4e6af59566b3e5b3520cf9431bc24bf56013a77e638b9a4dc1be49

  • Size

    4.6MB

  • MD5

    be8d696799cfebe007aa6ed336426f29

  • SHA1

    567c1697e803689a8a847b3a5c0146dcbec30942

  • SHA256

    f86262d00d4e6af59566b3e5b3520cf9431bc24bf56013a77e638b9a4dc1be49

  • SHA512

    f768a2f58e1da9b80fb7602c94ba68acb83d641a72af4c991f31d4de957fda498f00931c94fa93caa046bde31704983894e8fbd532d0e7b0c21bd66604ad46c3

  • SSDEEP

    98304:m3EOt3jLhB45ljCBq20QKrcXwrRnlqP6pRC1Mnjxp:mEaq20QKYXwdn9pRwMnjxp

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2