Extracted

• • Target

    0d9a307be74d55a052a05641cf8e235bb596a6058741b13c224b6ce2cab0b771_NeikiAnalytics.exe

  • Size

    119KB

  • MD5

    85a61a8ff980a41989f6bf11c148b910

  • SHA1

    c86812891a598a2f47a22b1454517e6aa0fa0ada

  • SHA256

    0d9a307be74d55a052a05641cf8e235bb596a6058741b13c224b6ce2cab0b771

  • SHA512

    68efa35e7e535f8da8a75bf884bf44d39b0485809abcd7962136c6261de2b52d5c6c9b924facddae117917cbe7f3e85f7cbd52d8c68b62709462c43439f95bf0

  • SSDEEP

    1536:KL0IGzbFmav82XwudL6+0MTqEjXm/D5AKHKOFPH4uHU0yFJhp/YX:m0poOfL6+JuEjaaKHK0PH4uHUtFu

  Score

  10^/10

  phorphiexloaderpersistencetrojanwormevasion

  • Modifies firewall policy service

    evasion

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Adds Run key to start application

    persistence
  behavioral1behavioral2