General

  • Target

    a75f26f94e81a91f8e8a11e43c1ddf90_NeikiAnalytics.exe

  • Size

    117KB

  • Sample

    240614-gk9lfsxdla

  • MD5

    a75f26f94e81a91f8e8a11e43c1ddf90

  • SHA1

    9686bada8d24df50391d3702f0d4ef142c0ec324

  • SHA256

    514bda35076343f032c625275468a543d51502b27dd08a330590553da37ef410

  • SHA512

    476c6427f6841829d80b57478120baa19b80f6bce5c100ae6a94aa606156e4a1b8b31c700e091d7e8a5884141993dce353b51087dcc2cc033915e0720b0ee47a

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsTq5q9BVI2IwTWn1++PJHJXA/OsIZfzc3/Q5:KQSohsUsWU9BK34QSohsUsWU9BK3T

Score
9/10

Malware Config

Targets

    • Target

      a75f26f94e81a91f8e8a11e43c1ddf90_NeikiAnalytics.exe

    • Size

      117KB

    • MD5

      a75f26f94e81a91f8e8a11e43c1ddf90

    • SHA1

      9686bada8d24df50391d3702f0d4ef142c0ec324

    • SHA256

      514bda35076343f032c625275468a543d51502b27dd08a330590553da37ef410

    • SHA512

      476c6427f6841829d80b57478120baa19b80f6bce5c100ae6a94aa606156e4a1b8b31c700e091d7e8a5884141993dce353b51087dcc2cc033915e0720b0ee47a

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsTq5q9BVI2IwTWn1++PJHJXA/OsIZfzc3/Q5:KQSohsUsWU9BK34QSohsUsWU9BK3T

    Score
    9/10
    • Renames multiple (6091) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks