Extracted

• • Target

    96dc6d09715e44521301edb291798420f8a865941529407cd5b1e8556b4be63f_NeikiAnalytics.exe

  • Size

    119KB

  • MD5

    1eefadde2d303cee79b1b24919b73ea0

  • SHA1

    0ef1d0ff51b9887366b4b0e6b51a9c7c78083f03

  • SHA256

    96dc6d09715e44521301edb291798420f8a865941529407cd5b1e8556b4be63f

  • SHA512

    4f6112d013b110dc8917e039b4cd0c08c5f3927c23cbadc3514c800b7e76917f76fa0c3acc99a27174b8364ea07ea3b0604830e18fc435ca1775f9ef0b03f912

  • SSDEEP

    1536:JL0IGzbFmav82XwudV6+0MTqEjXm/D5AKHKgz1WSLccPjjK77yad/C:10poOfV6+JuEjaaKHKgz1W8h7e78

  Score

  10^/10

  phorphiexloaderpersistencetrojanwormevasion

  • Modifies firewall policy service

    evasion

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Adds Run key to start application

    persistence
  behavioral1behavioral2