Extracted

• • Target

    b98e94a22a206568cc5c44c61382fef4ecfed241fa6f90a1db85e95d15897286.exe

  • Size

    4.3MB

  • MD5

    6017d985cd6c8c46e9b1be21f4e20102

  • SHA1

    3cae8c9100d0b6b80ecf999371f01fed59422eef

  • SHA256

    b98e94a22a206568cc5c44c61382fef4ecfed241fa6f90a1db85e95d15897286

  • SHA512

    fbd10dadb80977e596557f944687071669d80f30b1f2d4b1ec744d04b8ee745af1aaf0995986cf51acd7d70f621c4382a791a3b4ae36b63dfe7abe5a250f608b

  • SSDEEP

    98304:CzjQwkkXQtMdeYWvZiaL0JwGZgTDODoPeU0N4VcH5uQxU:EjQsFRWhia8gTDOkPuN4VrQ6

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2