Extracted

• • Target

    e5b2dbeb9458d7b686e9feaa81b8de24c348af81313dae5f50fd98a31defc44e.exe

  • Size

    4.2MB

  • MD5

    7266ea935f2654ae59593be3e5f9b7f8

  • SHA1

    271b326318509490d55e295b3c151cad39e2bb4d

  • SHA256

    e5b2dbeb9458d7b686e9feaa81b8de24c348af81313dae5f50fd98a31defc44e

  • SHA512

    631701105d6e3dbc56b5fa32e2e582b0920258b17bd9fa6ccae6471cc12c43d8ba71c12781cec31c6d9993943488654ee96a6210558816aeb4b744c729fcc6a9

  • SSDEEP

    98304:CCrcFKDCYAqNa/8yzp9f7oK3KADB1PqjXOc6c2AWsQxE:a8a/8Qp9f7oYKEkXx6c2DsQG

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2