Extracted

• • Target

    19ffaf791aa6e33bac356d6245e7f680_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    19ffaf791aa6e33bac356d6245e7f680

  • SHA1

    b65490b77e174fdaf37321750de44719de3dd5df

  • SHA256

    78a18a2d1ed4460c7c1cddfd81d023691d1fd1f57069eb605c765071ec17ba67

  • SHA512

    c9796f2411a5511b676079fa1236e90565a33e7c0bd2e3a3f2dba463685eb127b84a1f306562261f172922df93713d11c6ad444d975554b3b686f33d441da0e0

  • SSDEEP

    1536:ivkltltUCsdydraA0pHGErBzNbea6R5LH2uvIvES+avbuO+/TiQWFjYf4GO:QkhtURygXHpBzNbeFydEgeiQWFj5G

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2