Extracted

• • Target

    c29b41d0a853e9bec6478a0145c48440_NeikiAnalytics.exe

  • Size

    65KB

  • MD5

    c29b41d0a853e9bec6478a0145c48440

  • SHA1

    b92d7ded8912e9561f20fcf6828c523cca19fe5b

  • SHA256

    19752be9edf7d9f97070f6b5f2217c3e4ab3426a23cd04c894a50c0b7ce8a83f

  • SHA512

    26d8dcd255321d031dd374ea800cf64f29f3b866b325256dc9388884ab6942e7f0cf360360716411ec2343450841119a98014ab33a7f1d2b1cc8ede73292994a

  • SSDEEP

    1536:6KWO+unk0CSUYLnywgyKxMb+plFR+aMxJf+XNiN09l+D0aholB2OF:6ZO+2kF7Rdu+fFgs9QCl2+H

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2