Extracted

• • Target

    dfdd960489c26d9b24f1168d0c34d570_NeikiAnalytics.exe

  • Size

    7.7MB

  • MD5

    dfdd960489c26d9b24f1168d0c34d570

  • SHA1

    8ec16e116c30f96cabe2c2158ab76c2ed34672c9

  • SHA256

    3493ee438d9443ec8e17b3dcbcbf401a31b166646abbdecaab322417e5c873f9

  • SHA512

    7c0f611c5cc3e994802f59cb7f2ca1dfb4149d03ef539b7a94335cad8c150ba6772164eebcd2d4b137d56fce641462ea221cfd41e6828bf88d36e0701b9016aa

  • SSDEEP

    196608:ZvRJUIPjzayuSgMKykQgSaTkvMxEYT3OfPShE:ZJmOj2ZrMKykQgRdFw/

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2