Overview

overview

9

Static

static

3

6b4125012f...cs.exe

windows7-x64

9

6b4125012f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b4125012feaff1a182332b81b8ad680_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240523-bnn62agb7z

  • MD5

    6b4125012feaff1a182332b81b8ad680

  • SHA1

    de9867e233523ef55fd949f4386662cf7543c6e2

  • SHA256

    1d8a19605c49ff300899e7f691d70299f28ce0de1cdf5d0a897751ed636835ad

  • SHA512

    32072504d52fdd4d53ff3922aeb6d2432265c58bc48c7babda5118f73c16ccc8b373ab5af98eaa576f4396101e8951500d904f36362be8d4c8f3e4cfdc391873

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEbThyg:tFPxPke+eIZyg

Score
9/10
ransomware

Malware Config

Targets

    • Target

      6b4125012feaff1a182332b81b8ad680_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      6b4125012feaff1a182332b81b8ad680

    • SHA1

      de9867e233523ef55fd949f4386662cf7543c6e2

    • SHA256

      1d8a19605c49ff300899e7f691d70299f28ce0de1cdf5d0a897751ed636835ad

    • SHA512

      32072504d52fdd4d53ff3922aeb6d2432265c58bc48c7babda5118f73c16ccc8b373ab5af98eaa576f4396101e8951500d904f36362be8d4c8f3e4cfdc391873

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEbThyg:tFPxPke+eIZyg

    Score
    9/10
    ransomware

    • Renames multiple (3446) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks