Extracted

• • Target

    6b251b357a4ff2ff8fc367c082918f11872bcfc6ba6b69059c0d876de53337a7.exe

  • Size

    4.0MB

  • MD5

    a83fa5bb02751dbfa327f9ab06dca6df

  • SHA1

    f16ae580b52c611b0666f26a27f2027b111ee181

  • SHA256

    6b251b357a4ff2ff8fc367c082918f11872bcfc6ba6b69059c0d876de53337a7

  • SHA512

    4a8e582439deedac82ff5dce0737b55a5d5b4e870a9683a7879c58602777d76fb84a34b3d5c062e71cdfeaccbe1b3fa125e6f803dfb7be1dac0efea70b44f4b6

  • SSDEEP

    98304:CjOPRTI3Nar3fLobbeVfnGkSVqDWmbnsazR/7/qKwPLBzI21xQxE:DNIe3k/eVvGxUDdZ/q1LBMOxQG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2