Extracted

• • Target

    8fc201090d34fb3d4a9d1dcddee20c0acbd0c389051d7e5d5a0636c77868e72c.exe

  • Size

    4.3MB

  • MD5

    af5d541c450c2fae1b1c104528813038

  • SHA1

    bb4ef8d46353460e0409119e2dbaeb06b18314c4

  • SHA256

    8fc201090d34fb3d4a9d1dcddee20c0acbd0c389051d7e5d5a0636c77868e72c

  • SHA512

    a12b9896fd53bffea179a3220920255c8717625a824081f6fb282f2c928e05f88591bdbfd997b837797b7c93c72233ae993afadedc81fe0c1f9c048b63dc1fcf

  • SSDEEP

    98304:iivYe0VCWqCpTX/oqQsFwD0K1E3iwNiulKmK//bRA0kY:Hv/WDDGUfKW39NKNLi0l

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2