Extracted

• • Target

    580d55abb9f2612f3ede75cfee96f4b0_NeikiAnalytics.exe

  • Size

    97KB

  • MD5

    580d55abb9f2612f3ede75cfee96f4b0

  • SHA1

    792b4fbe7867d090f509139c1bbbaf55237bb807

  • SHA256

    f7167c8f7bd18607c14f9cc4507be0663e27fe1da01609c489a2ede3184abf76

  • SHA512

    c960d285523e3f49bab41621bee3e1c7e84f7cda6072a606b458e176587bfa34033da692c0361915d41ca0273264b2b499431c16ae78c12dd9389ecb5ad39e3b

  • SSDEEP

    3072:lSew83qQvyzkSIQQ8nXspEKGDPEkOb/B:8L86CyYubXspE5zn

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2