Extracted

• • Target

    4e8bdbe9065321defae3787a30196ec0_NeikiAnalytics

  • Size

    92KB

  • MD5

    4e8bdbe9065321defae3787a30196ec0

  • SHA1

    43b22f19eafc5d085162a5769d5b199eb76c00b9

  • SHA256

    2c4baa4608516bd183a3267f93a19d16899fd9845c8f4adf76a68e2d7b23ce56

  • SHA512

    cbefe2ce0a1c92c16561ffee241da9d2f00515e3c65b5393a7884e3ef0d3f3013bb6313dc2e0e8ad820cd3779e494e67bab0a6470ccb75cea8a10d30a5277ebe

  • SSDEEP

    1536:Ti8quWD7N2rFbkCIidOIL45+exB7rZ2fgdrReB6jKy/61KA7sFZkw4FJYVkF+dRX:TiFuWDQBIhidFG+iFN2odrReB2TA7wyi

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2