Extracted

• • Target

    2204617ee124bb0735e9028a83fcc940_NeikiAnalytics.exe

  • Size

    440KB

  • MD5

    2204617ee124bb0735e9028a83fcc940

  • SHA1

    becd2b104d9139f7c707bf8ce6fcbceb62aebf2c

  • SHA256

    4d9b640444b5d8c9594bc2b5e2b971cdbc344f3e02e15a514ba8527456c1bc13

  • SHA512

    a9210467c3dd2720e700e077d62809816e1b90fdf5ef8ffd77ce2c106da7e3e16a3d67700ce86b2bb2037eb31d2be2f378eea5d60558bccd40d9a554f28adf42

  • SSDEEP

    3072:xMs3fGBjN1Jrpi0kOBzleK6VU6SaQFQMg6WhrObwpm63ckm546kWfyY0/:xn3MN1JlveK6VUsQOjnrhbFw46o

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Modifies visibility of file extensions in Explorer

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2