Extracted

• • Target

    ab944d5f328f830aeb453a88b4c13540_NeikiAnalytics

  • Size

    65KB

  • MD5

    ab944d5f328f830aeb453a88b4c13540

  • SHA1

    e4ccac515006eab388ff1694904063e73374f808

  • SHA256

    ca43bd40aa55e72609501248bb139a1f33b0eebf13f6c005d6423b368c944e9a

  • SHA512

    6591406a41fb68161b50d7018994fb3f821f695e9930d2ee282448d16d71e139cb88b5e48bfbc69b7cb198add5734d069b2eadaf7f33b232dcbdb37aaa587f42

  • SSDEEP

    1536:3N6IJplHhmEkYAif67JhtNjKNhBj4qJNQtboZO7cBe:5NhmwU7JZKN3JJSMZO7Z

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2