Extracted

• • Target

    3e36e96928247fc44c957c4c7c92e530_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    3e36e96928247fc44c957c4c7c92e530

  • SHA1

    cc8d8deb5d477d5fd815022314387e50f2fe5c71

  • SHA256

    8d955657e3a5055442d25f8f506b51c3b972f32f8731b29ba828382bcd55beb9

  • SHA512

    b79758f55c9fcf19f603cab2da80787ca351e3edd48db7f6e6e7f4dc8a1a984ae8995a5c864ad7c0a427bd2145c6a92e11199022c0e26a1a2c5524434237e417

  • SSDEEP

    3072:BFJufv+mZrja1HjBo6m/kPBkY9YdG3Dq5bLT:BL9AnaxdXm4kaYdG3Dq5bLT

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2