Extracted

• • Target
    ae46a312e5cad0c1a0a25eddfd4c72ef.exe
  • Size 2.6MB
  • SHA256 fc856e3614e21d2cd35550401ac7dbdea7da3be2f9c8d796320f804b06e25748
  • MD5 ae46a312e5cad0c1a0a25eddfd4c72ef
  • SHA1 00a691955c3741b0759396954ba69643eb5cffb9
  • SHA512 b01cc250414ab1405d6d32ac00e51fee7ef80c332b8d12627082327b85d9b7fd87012a31b42ed4050dad74fd35f6e42128ee3541a64da0609f19379eac545038
  • SSDEEP 49152:C97Z6OtHMAu3yK/+ev+DArvaxcdKSeYZb712jggadFv9kyprzsV5nIpu1:MV5eA0JWu+DCvaxGKXYhMNG1zzsV5n/
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2