Extracted

• • Target

    9211da6729c7f773a7022fe1fae982d0_NeikiAnalytics.exe

  • Size

    65KB

  • MD5

    9211da6729c7f773a7022fe1fae982d0

  • SHA1

    0301ca709b17570b32b7327871206f310e80484c

  • SHA256

    8b4a93f5ac4de119d832672e3d5697668feb71f04c66b4db0e9c19b3e3988fc2

  • SHA512

    f85410c15f7b38a45251bd6f8e8232b718a5378386e70c1493b8fdaa512109a12c6f38b51f2b9589aea83c907bf6c4764644156e9528f8e790f29459f1301cfb

  • SSDEEP

    1536:0/71voblFefXtUdbJBLox1Q/O+kvK57meMSpjn8tIDx:g7ub/ef9mbH0oG+kvK7mpSpj8ty

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2