Extracted

• • Target

    fdcd9aad90ee4286c18e38c66e11de060071aadc152276d27fc4a05ceece44e2.exe

  • Size

    5.3MB

  • MD5

    f994acb7dbed36847915e627456693d4

  • SHA1

    01b0fb3903302795b3af4eed0ef51796a191c597

  • SHA256

    fdcd9aad90ee4286c18e38c66e11de060071aadc152276d27fc4a05ceece44e2

  • SHA512

    0aeac09a48cb8878bcadc9342e1a918a408eb2de13b431550c37296012972df02416d5e97e8e4f577a6ca0aeaf1bbd1415eafce73fc3b39414b9e36370f07b4d

  • SSDEEP

    98304:m2aeocgqTl7b+6rhpxq1Sr3SfJcs0l4xzQHPibsz8qyVLpymbA9W/qS3gz7NjVOq:Meaqhr7FYJcsEvibS+U19P2gn/

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Socks5systemz family

    socks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2