Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16-06-2024 05:01

General

  • Target

    d745d4ca37c754f744b8f82e659f5c40_NeikiAnalytics.exe

  • Size

    80KB

  • MD5

    d745d4ca37c754f744b8f82e659f5c40

  • SHA1

    852e86f2beff2e59492b4a92bcbb5edb68ab2044

  • SHA256

    13bd550da18e76ac30fe80d4127ef8ca2433a6a952acb3b74669f897125282e2

  • SHA512

    4aa536c2e3ea56867eb86d5d2cea213a9df5aa88a1e4c2ffda394f17ed2f371dcfa2f6cc35d3b042ecbc8116424919b52a22da6c15193b3a116a3cb23affbe97

  • SSDEEP

    1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696xZW:6e7WpXYvndK

Score
9/10

Malware Config

Signatures

  • Renames multiple (821) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d745d4ca37c754f744b8f82e659f5c40_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\d745d4ca37c754f744b8f82e659f5c40_NeikiAnalytics.exe"
    1⤵
    • Drops file in Program Files directory
    PID:1476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-39690363-730359138-1046745555-1000\desktop.ini.tmp

    Filesize

    80KB

    MD5

    22ce2aa80e1ea60748059bb4ba50f751

    SHA1

    91091a9ec8f7448a4927d8a4f9d016b2cfbf7920

    SHA256

    b958ecf340abda8b4a72ed092a8a3c5432c7a4805feb37300829082cc9b07c8e

    SHA512

    52e9a444b1860d3976cdbca8eaa69c4f851da8fd9d97a89e07682ade1a5f3a060f97e0a0c74cb81e3916f44b574b691b049d515a5a8ef76417d6bab6a0a6d93f

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    89KB

    MD5

    233ec4d260ee1f0d018c4fa8b6e6e100

    SHA1

    9b82ffdc7822e53e89a88934d4eb8c3e7ec51075

    SHA256

    f2a8c8b4f04928b5453095a501638a89cf6518c8629d2e3cbb2b04b6655bcdaf

    SHA512

    1d6893fefcbc2db06fb48bf1a28b18ce6f3f94186905986a0d4239ab2a98bcf189cc765a32701cc45b49a3a1175fcf9224bf44f0470650b5a1292d1ab80d440c