General

  • Target

    4b053543687a55e09bc4bb0d485a77c0_NeikiAnalytics.exe

  • Size

    97KB

  • Sample

    240612-2xmyfaxgln

  • MD5

    4b053543687a55e09bc4bb0d485a77c0

  • SHA1

    dee242af270d972eb4ac1adc51ef5c847287f46e

  • SHA256

    cd4eaf9c155f56a7e29ffcb8030f5aee8cd17d74af3f06b19a03ae6f27478b2e

  • SHA512

    af4de7aa9b64624098a91d3d66eff02b5c5983b90b813b577479aecf1cae83d13aea637419a0f46eb640ea533707378bb1e8bdc06771391c83bcc05e22f5f48d

  • SSDEEP

    1536:a7ZyqaFAlsr1++PJHJXFAIuZAIuyxX5rQulL:enaym3AIuZAIuyxJrQulL

Score
9/10

Malware Config

Targets

    • Target

      4b053543687a55e09bc4bb0d485a77c0_NeikiAnalytics.exe

    • Size

      97KB

    • MD5

      4b053543687a55e09bc4bb0d485a77c0

    • SHA1

      dee242af270d972eb4ac1adc51ef5c847287f46e

    • SHA256

      cd4eaf9c155f56a7e29ffcb8030f5aee8cd17d74af3f06b19a03ae6f27478b2e

    • SHA512

      af4de7aa9b64624098a91d3d66eff02b5c5983b90b813b577479aecf1cae83d13aea637419a0f46eb640ea533707378bb1e8bdc06771391c83bcc05e22f5f48d

    • SSDEEP

      1536:a7ZyqaFAlsr1++PJHJXFAIuZAIuyxX5rQulL:enaym3AIuZAIuyxJrQulL

    Score
    9/10
    • Renames multiple (3545) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks