Extracted

• • Target

    97397d1a9452a564ad57d83d3c6463dc1b68b85b80611f1425b589aa9bf57c22_NeikiAnalytics.exe

  • Size

    119KB

  • MD5

    6fa898b75a693a027aaa2b7e1d122010

  • SHA1

    9b5fef7a3285c2e4ec3e7b254deb398600bf41aa

  • SHA256

    97397d1a9452a564ad57d83d3c6463dc1b68b85b80611f1425b589aa9bf57c22

  • SHA512

    6879bc02d4c5a26f4e6bde6e87f3676df8030933b16b47a15798ab56ed4c2d08e114a8c47239282af25b253bd5d93b6c892445d99bf815006b8d57699cdc7680

  • SSDEEP

    1536:FL0IGzbFmav82Xwud66+0MTqEjXm/D5AKHKYiAF8O7vYtWpU9:R0poOf66+JuEjaaKHKIF8eNU

  Score

  10^/10

  phorphiexloaderpersistencetrojanwormevasion

  • Modifies firewall policy service

    evasion

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Adds Run key to start application

    persistence
  behavioral1behavioral2