General

  • Target

    a7973452db3ac32ca90b60aabd799310_NeikiAnalytics.exe

  • Size

    255KB

  • Sample

    240614-gmxpnsxdrb

  • MD5

    a7973452db3ac32ca90b60aabd799310

  • SHA1

    180184a4b3a7a6f6944901bc17810814a71c6ad7

  • SHA256

    6ce9478edadf71c551b4fbe32dc49db9794664a4c967fc686521d1ac7792faa9

  • SHA512

    98a0fa42c4c512eebc01a9bb9dec41a5e9dc8427effa78920ea7de4149e05bf310d5656507cac344bc6524f95f7816eee2d4a9970f50d265ae228534d35b5dcc

  • SSDEEP

    3072:fnymCAIuZAIuYSMjoqtMHfhflixicfAIuZAIuYSMjoqtMHfhflixiI:KmCAIuZAIuDMVtM/KfAIuZAIuDMVtM/m

Score
9/10

Malware Config

Targets

    • Target

      a7973452db3ac32ca90b60aabd799310_NeikiAnalytics.exe

    • Size

      255KB

    • MD5

      a7973452db3ac32ca90b60aabd799310

    • SHA1

      180184a4b3a7a6f6944901bc17810814a71c6ad7

    • SHA256

      6ce9478edadf71c551b4fbe32dc49db9794664a4c967fc686521d1ac7792faa9

    • SHA512

      98a0fa42c4c512eebc01a9bb9dec41a5e9dc8427effa78920ea7de4149e05bf310d5656507cac344bc6524f95f7816eee2d4a9970f50d265ae228534d35b5dcc

    • SSDEEP

      3072:fnymCAIuZAIuYSMjoqtMHfhflixicfAIuZAIuYSMjoqtMHfhflixiI:KmCAIuZAIuDMVtM/KfAIuZAIuDMVtM/m

    Score
    9/10
    • Renames multiple (3125) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks