General

  • Target

    64f7e9e0df1f36057ea2346c4196c530_NeikiAnalytics.exe

  • Size

    634KB

  • Sample

    240613-g13g3s1dpj

  • MD5

    64f7e9e0df1f36057ea2346c4196c530

  • SHA1

    e96683a6c6b1a99919a97341b0a4070de8b33dff

  • SHA256

    1da1dc27e4fa67a4d5da42228b41d9e9a22d8d219776ac8b3618024b7c369650

  • SHA512

    c01a289f4ccd33ba3c29f3e91977f9e875b2f353b5b85d76ce45de0a682e8815201f6f23ef8f8641affd3e8fbd4eef0d01265a6b4d5a15c05eb3f03c74c2e9e8

  • SSDEEP

    12288:3PxPir9RyiIuGcKbpaSL4vt9PxPir9RyiIuGcKbpaSL4vtW:3PxPiRRyisBpaSsvt9PxPiRRyisBpaS1

Score
9/10

Malware Config

Targets

    • Target

      64f7e9e0df1f36057ea2346c4196c530_NeikiAnalytics.exe

    • Size

      634KB

    • MD5

      64f7e9e0df1f36057ea2346c4196c530

    • SHA1

      e96683a6c6b1a99919a97341b0a4070de8b33dff

    • SHA256

      1da1dc27e4fa67a4d5da42228b41d9e9a22d8d219776ac8b3618024b7c369650

    • SHA512

      c01a289f4ccd33ba3c29f3e91977f9e875b2f353b5b85d76ce45de0a682e8815201f6f23ef8f8641affd3e8fbd4eef0d01265a6b4d5a15c05eb3f03c74c2e9e8

    • SSDEEP

      12288:3PxPir9RyiIuGcKbpaSL4vt9PxPir9RyiIuGcKbpaSL4vtW:3PxPiRRyisBpaSsvt9PxPiRRyisBpaS1

    Score
    9/10
    • Renames multiple (2833) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks