Extracted

• • Target

    a2fc29e11de24fb1347554e03aa1dbc0a4676e3ae8802afa0ae76c5094fe626b.exe

  • Size

    4.1MB

  • MD5

    e121298a3f3e2bc3f8c921396cbaac54

  • SHA1

    1289acbe827d05aa9a10e9cabbed698ebe06b268

  • SHA256

    a2fc29e11de24fb1347554e03aa1dbc0a4676e3ae8802afa0ae76c5094fe626b

  • SHA512

    75e21e929e17c1ba8eebb5c4cefdf4fe76b7d9de9d940a50e7f6fa5f36a8d5b8b2cc8dcc3aff10f7aa48bc2618ccc940fe87ade45dc1fb5ff8955aa3ea3b6cdf

  • SSDEEP

    98304:CaU7kJv7x9tTw2fp+6wUMVl2ieC3tQlDGgc/832kXQxU:C7WvPd3fp+6wHFQDciQ+

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2