Extracted

• • Target

    24293fe80890219d6ba375e03e21bbf0_NeikiAnalytics.exe

  • Size

    557KB

  • MD5

    24293fe80890219d6ba375e03e21bbf0

  • SHA1

    3aaa33d198e60250a4388151ff239962aacdc682

  • SHA256

    559a6a1ccb011d72d64859dff39acd52676c63aa8632d13085e86d7ae294b9b9

  • SHA512

    58f7de5163ec05f275f4c93c9d80354e2b581e021ebcbcf891257a09d0ae6f97ead80555f75ffe0b58738b6faa58021e0789fe09fcd72ab94bfd4ff4305a2678

  • SSDEEP

    6144:056wsbR5sev/aggS/iwOaT2f1fXWxh17u3UVwcYD/IYAOy8eOlDQVSFjBLhqUBrs:DworvppqRU1CqWgRm9DzjB1qUF4K

  Score

  10^/10

  phorphiexevasionloaderpersistencespywarestealertrojanupxworm

  • Modifies security service

    evasion

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Windows security bypass

    evasiontrojan

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2