Extracted

• • Target

    a368900d694dcd3c16af66f1116529a0_NeikiAnalytics.exe

  • Size

    120KB

  • MD5

    a368900d694dcd3c16af66f1116529a0

  • SHA1

    e20594826c4f3255daf78fd9edb9b7195028a04b

  • SHA256

    cc8412bfa514cab2f7b00f9e42da8f0a46bee9a672ba9d04820d452a7c4e0a28

  • SHA512

    4c3af44fbe9db638161115ce1e1babc1bb602679c4096972687db0377342d372d29a494415b01df398c913c55075c14b348f9e74c21a55d7df5aaa9fa38b7579

  • SSDEEP

    3072:eaWfEFcG3qtcZsyrSeFyAmsz4NzIyKOXxNDjwFujrc:nW8r3MhyrDwceXr4uE

  Score

  10^/10

  salitybackdoorevasiontrojanupx

  • Modifies firewall policy service

    evasion

  • Sality

    Sality is backdoor written in C++, first discovered in 2003.

    backdoorsality

  • UAC bypass

    evasiontrojan

  • Windows security bypass

    evasiontrojan

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Windows security modification

    evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2