Extracted

• • Target

    620aa8dfa0afd88a9946d2892facbf5748c1a79c2312dab507dd061d09905e5c.exe

  • Size

    2.0MB

  • MD5

    7a698634ca19583a33eebad7e816507f

  • SHA1

    9e364dd9cef263ee9c151c2073bb8fdf89860daf

  • SHA256

    620aa8dfa0afd88a9946d2892facbf5748c1a79c2312dab507dd061d09905e5c

  • SHA512

    f878e81c9d188ea3e3b2a596b1054ea55ab637fa34d2bd6ea149788e7deb1493c23a8a3e6d183f97f49b3c21e9944dd10fb04c57db05a32feda7a7a1a674b416

  • SSDEEP

    49152:32Jr4PzdBoeI9VEwYY1tfIpgiPuY2AOkjVCJhC0iYz0C:mkzQ9VjTfo1PuY5OsVMz0C

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2