Extracted

• • Target

    7f410bf8eac1204c6bc44c368358a01bd968d0e012f53be68ce4200f16ad7ecd.exe

  • Size

    1.8MB

  • MD5

    8f054a8b456dfbada75b7a2ef3ad7d73

  • SHA1

    d4496ee10ebcc4e2fb2f96d6a52ada228ba53530

  • SHA256

    7f410bf8eac1204c6bc44c368358a01bd968d0e012f53be68ce4200f16ad7ecd

  • SHA512

    8b9edb729e0012e06b1eade35fac69471432349f2facfe4fc0904404e02978d14e5dd0821d8c46657e9bd0aaf48226bac75f3c1773c86663fcc934b6adc1c83e

  • SSDEEP

    49152:C9mKJlfHPcJxlNkiWvE7m/7Y5ErBggstoOsN:MmYH0JzNDMEyEyBgNoXN

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2