General

  • Target

    60ea48f1b56b1b78e2872fabb37124a0_NeikiAnalytics.exe

  • Size

    84KB

  • Sample

    240613-ftel1avgkc

  • MD5

    60ea48f1b56b1b78e2872fabb37124a0

  • SHA1

    8eb94b949e6e53dd4fb4871ec8e88f3e14b0b1b4

  • SHA256

    2eebde60adff4947b3f409d82f08f3090f64572df862a20156082ce924a16e08

  • SHA512

    5a607c4e15613a4b1f97b914c0fb9b86a8fb447191192c3de56e026d7b00f7b5eca0639240d0437e4ba8d4c2e37fdf9c1ad2082ab198b3f73fd5bc5166032b87

  • SSDEEP

    768:W7BlpNLpARFbhblkYlkuvIYFdE7BlpNLpARFbhblkYlkuvIYFd5:W7ZNLpApCZuvIYXE7ZNLpApCZuvIYX5

Score
9/10

Malware Config

Targets

    • Target

      60ea48f1b56b1b78e2872fabb37124a0_NeikiAnalytics.exe

    • Size

      84KB

    • MD5

      60ea48f1b56b1b78e2872fabb37124a0

    • SHA1

      8eb94b949e6e53dd4fb4871ec8e88f3e14b0b1b4

    • SHA256

      2eebde60adff4947b3f409d82f08f3090f64572df862a20156082ce924a16e08

    • SHA512

      5a607c4e15613a4b1f97b914c0fb9b86a8fb447191192c3de56e026d7b00f7b5eca0639240d0437e4ba8d4c2e37fdf9c1ad2082ab198b3f73fd5bc5166032b87

    • SSDEEP

      768:W7BlpNLpARFbhblkYlkuvIYFdE7BlpNLpARFbhblkYlkuvIYFd5:W7ZNLpApCZuvIYXE7ZNLpApCZuvIYX5

    Score
    9/10
    • Renames multiple (5068) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks