Extracted

• • Target

    f4969695d2254e3942c65ea612d8081c9e03721c7df77c42dc83994119581e8a.exe

  • Size

    4.0MB

  • MD5

    3b5e5e15b99a49c9259e7bbd6d64f608

  • SHA1

    2d83d60e66af0b76ecb7087d043a84bb5b783dc1

  • SHA256

    f4969695d2254e3942c65ea612d8081c9e03721c7df77c42dc83994119581e8a

  • SHA512

    cd243e4e755729e7b8a2ea30ecf3c9c049ed86550210cdc0595b8cf6e0eee631a1a8d2f9b73c4de8ab1f52b4b66cd33eac27dc49effbbf87dc9f3f56f6e72710

  • SSDEEP

    98304:CMZLyZfXNbL+NCRBjdYkU+RsadLypI97NWO:3Zmh84RBjKFAxy0wO

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2