General

  • Target

    b037b8f160ba7d1e3a23b633b13efaa0_NeikiAnalytics.exe

  • Size

    139KB

  • Sample

    240614-j7yhtawbln

  • MD5

    b037b8f160ba7d1e3a23b633b13efaa0

  • SHA1

    a259ccf22ac290df6f670b361f3388dec24b6078

  • SHA256

    586018632ae71b117a10ce280f865db8564199a5c12554cbb1a8fcd9739dc070

  • SHA512

    52b381130c97c8e424ee53d6e063822294d10bfc04a7ce376c6ce4014378d5e8c2431561d05ef3499c559c876c8d7ded8c2e8f525f051d9ac3b45a0ae7e7fea0

  • SSDEEP

    3072:fnyiQSohsUsWU9BK3QQSohsUsWU9BK3Wl:KiQSohsUsWU9B/QSohsUsWU9BR

Score
9/10

Malware Config

Targets

    • Target

      b037b8f160ba7d1e3a23b633b13efaa0_NeikiAnalytics.exe

    • Size

      139KB

    • MD5

      b037b8f160ba7d1e3a23b633b13efaa0

    • SHA1

      a259ccf22ac290df6f670b361f3388dec24b6078

    • SHA256

      586018632ae71b117a10ce280f865db8564199a5c12554cbb1a8fcd9739dc070

    • SHA512

      52b381130c97c8e424ee53d6e063822294d10bfc04a7ce376c6ce4014378d5e8c2431561d05ef3499c559c876c8d7ded8c2e8f525f051d9ac3b45a0ae7e7fea0

    • SSDEEP

      3072:fnyiQSohsUsWU9BK3QQSohsUsWU9BK3Wl:KiQSohsUsWU9B/QSohsUsWU9BR

    Score
    9/10
    • Renames multiple (3130) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks