Extracted

• • Target

    334aa9c3f1a7ca13d627eeb1bf07c1f3a2c8e06bbc84651d851a3c9e07a5d6e3_NeikiAnalytics.exe

  • Size

    119KB

  • MD5

    cc05252ef39945c9d33aaafdde4b6200

  • SHA1

    022f9380dab5ab360b7ef74bdcd2bc02acf8f594

  • SHA256

    334aa9c3f1a7ca13d627eeb1bf07c1f3a2c8e06bbc84651d851a3c9e07a5d6e3

  • SHA512

    55c498c4236e066409b26704ce10136930b1f72b4bbf08b3d47375ac8e88b64f34fdc7099361d27b9b1ea4ba274b6ca5c606133ddc798c732d9c2b90a7e479c2

  • SSDEEP

    1536:lL0IGzbFmav82Xwudw6+0MTqEjXm/D5AKHKj/HUHCYAxqWERc:x0poOfw6+JuEjaaKHK4HHAxq7

  Score

  10^/10

  phorphiexloaderpersistencetrojanwormevasion

  • Modifies firewall policy service

    evasion

  • Phorphiex payload

  • Phorphiex, Phorpiex

    Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

    wormtrojanloaderphorphiex

  • Adds Run key to start application

    persistence
  behavioral1behavioral2