Extracted

• • Target
    2eb075702e891721b5b86a8831498b20_NeikiAnalytics.exe
  • Size 5.6MB
  • SHA256 99f1b0f7555cd3ea1601a11ead5a7b43de9b77291d94c10fc66b79c31ebe073f
  • MD5 2eb075702e891721b5b86a8831498b20
  • SHA1 0d5d63c72cd0001e2fea80703dc2949ba10a0a01
  • SHA512 07956d04e1155bb11ab23021803ec37ccfdd5fa172ad97c5ced96ef2386c81b99b44c3d32caab17d71c76c7a9dc098ea1b2da8a9ca18072c02db00ef655eb39a
  • SSDEEP 98304:m9pFaDbWXEfqjamGFiVL6Jw6vNQ7bPe03Ioe9TFrritJ7YfiZpAApkQJneto6Jfm:O4D6uqmmaU6XNQfPe03IoN7QgfpkQZeA
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2