Extracted

• • Target

    ee094b47e9e3bb7ba12d171bce953b0511b9fa3c8e5deb3d2662078bc72ad9c4.exe

  • Size

    2.2MB

  • MD5

    9357e67e1024655f3302a794adc9c8da

  • SHA1

    ed8eb9f4da01fd739d21e8684e95bd381e103402

  • SHA256

    ee094b47e9e3bb7ba12d171bce953b0511b9fa3c8e5deb3d2662078bc72ad9c4

  • SHA512

    c55f0e44cf043351a70dd7fa2338aefbb0f66cd243f0bd959cc38e076a7c0b6593b65fbdd89d0c17be0b84d5fc4fbe07fed90c9ce1bbcb19e2509551dbcd7b2e

  • SSDEEP

    49152:32Q41RVpy6V66wEMgH09q+rPkhP9UsqcbKXQoWWoE587rYrNr6e7D:mQK8V6jk3Pkd9zzWZ8nYrNuc

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2