General

  • Target

    144e1306466b6e1c9fa925611036f240_NeikiAnalytics.exe

  • Size

    451KB

  • Sample

    240517-wpen7sbg7t

  • MD5

    144e1306466b6e1c9fa925611036f240

  • SHA1

    0f0cac2424bcadd6b71bc82203be984d83103aa8

  • SHA256

    6725977e75359b834ef290386223c097178a9856c0fab53bef29e3791a25bea1

  • SHA512

    3c3b39371b10362c783532bf9a2b23eac11fead2876ba57db971419cf5bc0340eb0652b33daf7354b4a759b3cea0d552e81de4b1343fb4ea96e944a50c324dba

  • SSDEEP

    3072:7po0k6ZWVTaif6sCGtkLTucewuzfStiQ//0kIFtBbJAnaJnyP80cUzR:1NZWVPkvMwuzK//0ztB1AnoyPKUl

Malware Config

Targets

    • Target

      144e1306466b6e1c9fa925611036f240_NeikiAnalytics.exe

    • Size

      451KB

    • MD5

      144e1306466b6e1c9fa925611036f240

    • SHA1

      0f0cac2424bcadd6b71bc82203be984d83103aa8

    • SHA256

      6725977e75359b834ef290386223c097178a9856c0fab53bef29e3791a25bea1

    • SHA512

      3c3b39371b10362c783532bf9a2b23eac11fead2876ba57db971419cf5bc0340eb0652b33daf7354b4a759b3cea0d552e81de4b1343fb4ea96e944a50c324dba

    • SSDEEP

      3072:7po0k6ZWVTaif6sCGtkLTucewuzfStiQ//0kIFtBbJAnaJnyP80cUzR:1NZWVPkvMwuzK//0ztB1AnoyPKUl

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks