Extracted

• • Target

    660fa9ad8232f556bced300fb5b14410_NeikiAnalytics.exe

  • Size

    65KB

  • MD5

    660fa9ad8232f556bced300fb5b14410

  • SHA1

    b7227e4c15db209f3b6d9b7cabef838fcbdda273

  • SHA256

    9cf3ce397583d1d809c737fc7988a7b128ece226f11e0f829f83fc56928acd1c

  • SHA512

    47fc979039f94ae49a4aed81bd80c2058e61356d459c4db90c6fb9ead5a31d004c79b9603366246e03e3c13ff77e57b7b45a0e905c8740d5c9f193941b72b6c3

  • SSDEEP

    1536:L7n3FyZr46I38Yz44ekljG7vw3eIST4KpXX9JBk:HVyZMxxePzGr0NJBk

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  behavioral1behavioral2