Resubmissions

13-05-2024 10:09

240513-l7ag4ahf7s 9

13-05-2024 10:05

240513-l4hpasae49 9

13-05-2024 08:36

240513-khmkpaee61 9

General

  • Target

    aaac11137aa88a7acc11e5070e674900_NeikiAnalytics

  • Size

    152KB

  • Sample

    240513-l4hpasae49

  • MD5

    aaac11137aa88a7acc11e5070e674900

  • SHA1

    a571fb84922b258933262d20e4b48095effc57e1

  • SHA256

    b52b2e8b5319905b765716c775033dca3cc0b191c3ac410d34de1fde8a07b005

  • SHA512

    97de855675c11b2595a88046becad33f8c695be3620641058e6c54ce16ac47de04b77dea058e83ce337bbafc4cf6099883e104ce1f8f0dead45099545989fb55

  • SSDEEP

    3072:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuXwFwtd3:KQSo1EZGtKgZGtK/CAIuZAIuH

Score
9/10

Malware Config

Targets

    • Target

      aaac11137aa88a7acc11e5070e674900_NeikiAnalytics

    • Size

      152KB

    • MD5

      aaac11137aa88a7acc11e5070e674900

    • SHA1

      a571fb84922b258933262d20e4b48095effc57e1

    • SHA256

      b52b2e8b5319905b765716c775033dca3cc0b191c3ac410d34de1fde8a07b005

    • SHA512

      97de855675c11b2595a88046becad33f8c695be3620641058e6c54ce16ac47de04b77dea058e83ce337bbafc4cf6099883e104ce1f8f0dead45099545989fb55

    • SSDEEP

      3072:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuXwFwtd3:KQSo1EZGtKgZGtK/CAIuZAIuH

    Score
    9/10
    • Renames multiple (3170) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks