Extracted

• • Target

    4df4c28a9b4657f929ef9bdc44a0d350_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    4df4c28a9b4657f929ef9bdc44a0d350

  • SHA1

    7083dfc3e7bd4b297b902fc18c49ee29dd6e6166

  • SHA256

    4f20e029e3a65aeb978f2b19a2fcea2391c86e5d60ff9c4f627b7474b60f3df0

  • SHA512

    91ca16a2937568911bd2eacb0b4f5560d487f082fe848bd8c92a7799631f6d58bdf766b0fc236ca3b251d0c1b5bbd0eaadc5bc12e6215ef22e6948cd17267762

  • SSDEEP

    3072:dlftng9eZYxY7ODEwj09oi1A2QWjwZOtTRpMKtVGoczaWN:X2TREciLQW0GsoczaWN

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2