Extracted

• • Target

    d60edf09387123d96951ea7d8c11fe322bd2354e8978c03f25d2766a3fab95e6.exe

  • Size

    4.4MB

  • MD5

    997fa8b3091257c3187d92e5acc5d949

  • SHA1

    698d8a36bede6f524494b0f02049d2610f589a94

  • SHA256

    d60edf09387123d96951ea7d8c11fe322bd2354e8978c03f25d2766a3fab95e6

  • SHA512

    2e80c507f9b6f81c287b7d245c0c2bfdfdbf56e0b31fe57f7b59efbb001d5f0eaf80ffaabcebf574ab2de85aa11a50f035845aa44efe1326e144c843b3028ce8

  • SSDEEP

    98304:0+oxIebTQG32c4Rxq2i9HOZj1w8e1CS9MvvY:0+yIebN2cKxqP9HOx1/QGvY

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2