General
- Target 0e6b6495f1c685057bfe67d8f2dcd260_NeikiAnalytics.exe
- Size 118KB
- Sample240601-3xccdaca42
- SHA256 eb5ee0e46e74dd73f1a69e60281e2d725403f137a31bc1847deb91e1ce86e477
- MD5 0e6b6495f1c685057bfe67d8f2dcd260
- SHA1 cde1e71943c1b9c35f7e90140fd8a3f9d305d02a
- SHA512 9dfc44568050aa426fb8187c89954b102681fe82ce1a2bcf8bc9e696327fbd5c5fa440639fdc7ced8ad5969e0874202a6cb7f1142f25ffd03ca110d56530da0f
- SSDEEP 1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM37ZhA7pApvOsOKjC0YSilpFpfkJOMRB7:6e7WpXYvnge7WpXYvneB7
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0e6b6495f1c685057bfe67d8f2dcd260_NeikiAnalytics.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e6b6495f1c685057bfe67d8f2dcd260_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 0e6b6495f1c685057bfe67d8f2dcd260_NeikiAnalytics.exe
- Size 118KB
- SHA256 eb5ee0e46e74dd73f1a69e60281e2d725403f137a31bc1847deb91e1ce86e477
- MD5 0e6b6495f1c685057bfe67d8f2dcd260
- SHA1 cde1e71943c1b9c35f7e90140fd8a3f9d305d02a
- SHA512 9dfc44568050aa426fb8187c89954b102681fe82ce1a2bcf8bc9e696327fbd5c5fa440639fdc7ced8ad5969e0874202a6cb7f1142f25ffd03ca110d56530da0f
- SSDEEP 1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM37ZhA7pApvOsOKjC0YSilpFpfkJOMRB7:6e7WpXYvnge7WpXYvneB7
- MD5 SHA1 SHA512 SSDEEP
Score9/10Renames multiple (4372) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
Executes dropped EXE
Loads dropped DLL
Drops file in System32 directory