Extracted

• • Target

    149a1b5c4a45b9773e70f0d1160479a0_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    149a1b5c4a45b9773e70f0d1160479a0

  • SHA1

    7c2d9a5590929f26f7fbe1d577d855767107b4b5

  • SHA256

    2acbf4c90d074db6004ae8b0d2250965e8a95f1f144d47196245256b21c1dc83

  • SHA512

    d075f1921da508e857973fc6bcac36886285dcf29965772f3d3aedb766b3120272ac4c32a40724fe5476434b091565d3f10727dd775ddd9dec3f4d55ba43f854

  • SSDEEP

    3072:bwDZYTlhrcjk8lxC4VD1uTy9u524jeHp4:bwDYhrek4pV5gyu5l6p

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2