Extracted

• • Target

    0c2ee073a171e832a4343033a8269230_NeikiAnalytics.exe

  • Size

    119KB

  • MD5

    0c2ee073a171e832a4343033a8269230

  • SHA1

    6aac5cebf7fab3cdc1cf24764efaac0d375ca1bb

  • SHA256

    67fe6eaeb4d34b867092dfce8f8e5c99aed763886deed9686c3316286e3872e7

  • SHA512

    3580ddba4a65fb8f372cacfb76e4ebc98811bf6e24d3400502d901572dc0ea0930d7d6bb626fc914a757f47f3e7752b1db42dff438b5c2fdf780f5e4b15fbb65

  • SSDEEP

    1536:yL0IGzbFmav82Xwudi6+0MTqEjXm/D5AKHKkkU3XhOQpURC8:+0poOfi6+JuEjaaKHKkd3X/F8

  Score

  10^/10

  phorphiexloaderpersistencetrojanwormevasion

  • Modifies firewall policy service

    evasion

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Adds Run key to start application

    persistence
  behavioral1behavioral2