Extracted

• • Target

    a7fd3b32531a0003fbdcde9b444e21c0_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    a7fd3b32531a0003fbdcde9b444e21c0

  • SHA1

    31cb75ba701ece927a0445f68ea23cf899f20090

  • SHA256

    0a18241b87c8d2b5a29e76988e76150666850e008a8b94dda413a67f8f925400

  • SHA512

    5e1ff56f06ae6f052e6af0e9a6729b0d72792d20e798fc15a505c966fce034cf845dd5d1f436d008834ec5fe273ef249ab2998975c78a98d7949019843fb2257

  • SSDEEP

    3072:btTGre8BZUe0uL74U6KnQOk6pmGFHSLq7:bRae8Ie0uL74Cnp1V

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2