Extracted

• • Target
    e983c404a021ca5f841ebcdd9bb2ea5d.exe
  • Size 4.8MB
  • SHA256 3ac649efec98618189a42456ee70029e75c7fcbafc1ccee4e2cd54c8be0f5ce9
  • MD5 e983c404a021ca5f841ebcdd9bb2ea5d
  • SHA1 2bda1dc9f92c7b943e85cbe32e51ce0cfb85e9e9
  • SHA512 de08b44b22ab1fcafefdc4e74f94dfe029e4517a849b1ca3774587c349ff54513749e902c0134193dceb93df0ff141f771078a4daf55dcf5fa53fa193ff68b61
  • SSDEEP 98304:mgE81Gn7OGJOfXAhpvmU+XnoMdSMtx9JQLDXIm4938BNi:FP1Gn7VJiXAhpvmU+X3vm54Ki
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2