General

  • Target

    797cb67d23ef123b2a70e333e6c9b200_NeikiAnalytics.exe

  • Size

    230KB

  • Sample

    240608-acrx4sec8y

  • MD5

    797cb67d23ef123b2a70e333e6c9b200

  • SHA1

    fa1610c00916c0188add754d45dea415e9f21cc3

  • SHA256

    4ba5978d54599bbbcceb8902fbe5cbe21ec6ff88d80ba52f1832806494c78631

  • SHA512

    8c605e2ca3936c871c36a8d2ea967aa4ba980431abedac8dc64d4df45c3e7b355d48e2919dd0ce36f544c0d7356b23b49caa1e32d7c1c006a1727e7a7e5a8627

  • SSDEEP

    3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuYch93g+gfFpsJOfFpsJAaO:JiQSo1EZGtKgZGtK/CAIuZAIuH38

Score
9/10

Malware Config

Targets

    • Target

      797cb67d23ef123b2a70e333e6c9b200_NeikiAnalytics.exe

    • Size

      230KB

    • MD5

      797cb67d23ef123b2a70e333e6c9b200

    • SHA1

      fa1610c00916c0188add754d45dea415e9f21cc3

    • SHA256

      4ba5978d54599bbbcceb8902fbe5cbe21ec6ff88d80ba52f1832806494c78631

    • SHA512

      8c605e2ca3936c871c36a8d2ea967aa4ba980431abedac8dc64d4df45c3e7b355d48e2919dd0ce36f544c0d7356b23b49caa1e32d7c1c006a1727e7a7e5a8627

    • SSDEEP

      3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuYch93g+gfFpsJOfFpsJAaO:JiQSo1EZGtKgZGtK/CAIuZAIuH38

    Score
    9/10
    • Renames multiple (3165) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks