Extracted

• • Target

    dbacc22a10297607bfdbdd3c671c038faf0d344fd7c42acc7da2b6795bb6ff8d.exe

  • Size

    5.2MB

  • MD5

    08f15b3680d4efd7fa89c0dbeb01db7c

  • SHA1

    a1badddbbd31fe4ce1b465d240258955f561a5f0

  • SHA256

    dbacc22a10297607bfdbdd3c671c038faf0d344fd7c42acc7da2b6795bb6ff8d

  • SHA512

    245ab42852b49f78f46908ebceb4f8e6a6afbce44b35af89975201591a2f56a2e49a7613a1b2f77803c04379660f7315eec54ee268eb8bc6391f7ace645dd772

  • SSDEEP

    98304:+tpyR9r4cTwsMTJXu83Bt+pDVyFVUoSeqtvvij0nkz7d1ZKQ:Rb4bsMTFuStegVUKqt3ijHRXKQ

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2