Extracted

• • Target

    572bc11bdfc00fadcb0cb4dcb65e0fb1e5e0d905c3af25e57cdd747a8c90af02.exe

  • Size

    2.0MB

  • MD5

    5eed498099af9c5342943763aa514f4f

  • SHA1

    83d5b278c3a55518d0f5c44da02a83b77844f8b1

  • SHA256

    572bc11bdfc00fadcb0cb4dcb65e0fb1e5e0d905c3af25e57cdd747a8c90af02

  • SHA512

    697ecd84aa05900f5982fdedc8fccbcae61bf2328a75cb8b04c2cc6949d1fa34e7d76b4381fc4ad0707dbb2d774d212142b6ec2105a53634ea121eee34d34f27

  • SSDEEP

    49152:32nRKkmt/A6k8TnqNxHhZOUhd0VFAWXjB17OMO5h+z5:mnRK3Y6NTqNrTWTB1xUh+9

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2