Extracted

• • Target

    1bb97aa3463c4b741ab5d636af84f14ee885d617995af9992f7c50eb5a6e0f1e.exe

  • Size

    4.3MB

  • MD5

    d82a5d515e202bd878e28860b88ccb77

  • SHA1

    82bb20e6b538420c9da34b8a863790b8ea0f8c51

  • SHA256

    1bb97aa3463c4b741ab5d636af84f14ee885d617995af9992f7c50eb5a6e0f1e

  • SHA512

    2614aca6c7907c18c84b85afd8ff0655f6971a1329c10254cb7412b197a967dd4262ce57e846f78bf201aa0436e76272771a2aae13151a88751c4f660fdf2088

  • SSDEEP

    98304:C/n5kiTOOrVoKowIcqm6ZBCUAGpJg/pf+0L5AiLPziVCHQx3:KlOIVoKowIk63/A+8pf+Y5z2VCHQp

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2