Extracted

• • Target

    8bc054584ee3b66aff2b8cec6800ea984321036528668ccc3ac1defef08ac581.exe

  • Size

    4.3MB

  • MD5

    4a8f745c42d4fb16d79fbabbb8b8b075

  • SHA1

    0e303a99ac9152ad97092b362a099a0eaafa8d3f

  • SHA256

    8bc054584ee3b66aff2b8cec6800ea984321036528668ccc3ac1defef08ac581

  • SHA512

    1405baeaca7083741f4b4f1dab3df2905d9ca34689cb152d3e2258dd9ee19b124006662c9a5bddbfceb5aa66d66bbdc8bf461eec28d21831386f4066cdcc1d9f

  • SSDEEP

    98304:CUojlGNrjYxp1G2sYwX854ClL38w/dJc0k5uvRsUh4KmAQxV:68sp1G2szI4QA0DtQL

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2