Extracted

• • Target

    ebfb6517677689d78a5a66276a706790_NeikiAnalytics.exe

  • Size

    84KB

  • MD5

    ebfb6517677689d78a5a66276a706790

  • SHA1

    26a461b06d0e0bfc8c259802daa5025d9ca2d133

  • SHA256

    51a954b4f37874d38047f7ad57fe1317da31446e94e5d16adf52f294bff5ab1d

  • SHA512

    9de118650391da4d52d75f90472ea5031cf2d691175123bb9f11adc3dd28df8750891ae6c5b8f82981b11f696d4c6273ab74c8ccd02beb6664cb706a24a4ab30

  • SSDEEP

    1536:mdWtB3xiuf/DtqGWpOjrSnuGruej5px2rOu8MGCcP1+rxnApW:mdW/3ou3JpjrSnuG6Y5bt+rxApW

  Score

  10^/10

  upxsalitybackdoorevasiontrojan

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2