NoisyS0cks: Undocumented SOCKS5 Pivot Framework Giving Ransomware Affiliates a Foothold Inside Networks

### Executive Summary This report analyzes "NoisyS0cks" (s0cks-noise-v1), a Golang pivot framework that establishes smux-multiplexed SOCKS5-style tunnels using KCP-over-UDP (DTLS obfuscation) or Noise-over-TCP (TLS obfuscation), persists as a fake TieringEngineService.exe and scheduled task, and is designed to enable lateral movement and multi-stream tunneling for follow-on activity; the analysis includes static/runtime findings, PCAP verification, IoCs (hashes, C2 67.217.228.51), and a YARA rule.