Extracted

• • Target

    78ac5c041d2db6915b674a47b53ab3e0_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    78ac5c041d2db6915b674a47b53ab3e0

  • SHA1

    222d66cd4cc368b55eae359418cc06e913fadfe0

  • SHA256

    6f83babeb6f788e68d280f26955e7784eea5464ce8c2a2448615e7756d9ee253

  • SHA512

    f3d1feb61ffb5588efec027ad62c3fbf1415415e11e4dc6b4f846bb9a672cca5444f127ed0cb2b7b14934d1a8c03af1e288bc6ae98128a488196e187ee556179

  • SSDEEP

    3072:ZTotc+6QSXlBkMHJ6aVjN9+ML42z+Po9yRxN:JMcb7LkMHkCjNnL4PA9yR

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2