General

  • Target

    21a65b1e7f82a6e56b95b9694e41f970_NeikiAnalytics.exe

  • Size

    69KB

  • Sample

    240611-a76praxdrb

  • MD5

    21a65b1e7f82a6e56b95b9694e41f970

  • SHA1

    de2102bfa7c7a60cff31a7f914ebb5ebfb6e1b49

  • SHA256

    69902823e4f59a59020e2e99e7cebd1b0edc771bab9af4482b4cafeab1a44b7a

  • SHA512

    ed90f468e09a71d4e885297bdab664e2ea5f3affd3bbf705798d94eaacda5dc39c4e8684fbad313608bdee0b6a7561ff18f53d5d0c7911fd303d730bbcb50379

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8g:+nyiQSoz

Score
9/10

Malware Config

Targets

    • Target

      21a65b1e7f82a6e56b95b9694e41f970_NeikiAnalytics.exe

    • Size

      69KB

    • MD5

      21a65b1e7f82a6e56b95b9694e41f970

    • SHA1

      de2102bfa7c7a60cff31a7f914ebb5ebfb6e1b49

    • SHA256

      69902823e4f59a59020e2e99e7cebd1b0edc771bab9af4482b4cafeab1a44b7a

    • SHA512

      ed90f468e09a71d4e885297bdab664e2ea5f3affd3bbf705798d94eaacda5dc39c4e8684fbad313608bdee0b6a7561ff18f53d5d0c7911fd303d730bbcb50379

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8g:+nyiQSoz

    Score
    9/10
    • Renames multiple (3638) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks