Extracted

• • Target

    4509a73cb5aafc7b4237fb0cd5146008d52118cb88ca38a3987a9ddcb11c82a4_NeikiAnalytics.exe

  • Size

    124KB

  • MD5

    0749d229da06424b5004494ec481cdd0

  • SHA1

    0de2711e84e61dab5b2f8bf2570fc1e51bdfaf36

  • SHA256

    4509a73cb5aafc7b4237fb0cd5146008d52118cb88ca38a3987a9ddcb11c82a4

  • SHA512

    41addf0a07fe5b8ddfa980e31d2adee1556751d69bf6e4a30c5d7e4710f916d4b3e1bb8474bdf2446d06448b0aa2c2dc252e87a1b9865cfc4c6526cce34ea6c8

  • SSDEEP

    1536:vL0IGzbFmav82I3duCPu0864k/+ELInCSA+HKvWDsP6Jd2QfKYPuj:j0poO0PuRxk/jr+HKvty72Qfg

  Score

  10^/10

  phorphiexloaderpersistencetrojanwormevasion

  • Modifies firewall policy service

    evasion

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Adds Run key to start application

    persistence
  behavioral1behavioral2