Extracted

• • Target

    e3a7940c60cc444eac152bf73714078aebc1c9e322f30a1dc83e3eb5d1c8be62.exe

  • Size

    4.3MB

  • MD5

    e921d7523cdb00066a07807fc7669b68

  • SHA1

    0284eeb47246d1fc3da6c894f6b0c42c892cc008

  • SHA256

    e3a7940c60cc444eac152bf73714078aebc1c9e322f30a1dc83e3eb5d1c8be62

  • SHA512

    eb9dacf25cca8c049c82c9a4a08cb86089eec3ccc4fdaf2db58422102c3e7dcd618d7cd4d7ff55934bce6b7bcb90822f25214878c980c140e216c27c60286bf8

  • SSDEEP

    98304:C8if8YszyevO+xt2xHz2hZhHYs7yTyPCTsHg4cbQxZO:K8YszyevFSSZh4F2CAHgrbQzO

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2