Extracted

• • Target

    b32387581402713d84613ad15424f260_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    b32387581402713d84613ad15424f260

  • SHA1

    7edf002b2058d9c57aad895f9d3fe793b4c5fe69

  • SHA256

    1d5379c89468efc2d434497d13b7e9d9544dbe3ec1fd7a6f1f28cfc9007132d7

  • SHA512

    0c86d52be7604fdd9103f89ea30ae852008ad04cf15d01d85c9250d5399576e685e9fb2f460ea837ff009fdca1b988ed05bb64b698a11d850904ad88ea208b5d

  • SSDEEP

    1536:cqKmDQ7RcVEDAj7HCJoK3Vk+pBlDG+o8/okts41aRf4KYWFNHbVMM3:cTjShj7koKFk+v0nQ5XIRfvYeB

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2