General
- Target 5a6c9591417cec01a5e98363acd41e50_NeikiAnalytics.exe
- Size 158KB
- Sample240617-has2dssemr
- SHA256 4fcb3a6b6d3284467b0211ddcce68883da890bf61a5c875be19345311cf06ed7
- MD5 5a6c9591417cec01a5e98363acd41e50
- SHA1 ff9774f06d89733ac3f14fd6c2d70d4db76063a3
- SHA512 b4559e34c486f628e4b9e14bda2e329157feca5f3fb6e0d81cee0e58ff4399cee1128762904b2d34ae7383a5f33853ee9be1a2a154deff533e8a8d2a739cec4e
- SSDEEP 3072:6e7WpP9oVLQthbYY9oVLQthbUvne7WpP9oVLQthbYY9oVLQthbUv5:RqAmqAh
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5a6c9591417cec01a5e98363acd41e50_NeikiAnalytics.exe
Resource
win7-20231129-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a6c9591417cec01a5e98363acd41e50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 5a6c9591417cec01a5e98363acd41e50_NeikiAnalytics.exe
- Size 158KB
- SHA256 4fcb3a6b6d3284467b0211ddcce68883da890bf61a5c875be19345311cf06ed7
- MD5 5a6c9591417cec01a5e98363acd41e50
- SHA1 ff9774f06d89733ac3f14fd6c2d70d4db76063a3
- SHA512 b4559e34c486f628e4b9e14bda2e329157feca5f3fb6e0d81cee0e58ff4399cee1128762904b2d34ae7383a5f33853ee9be1a2a154deff533e8a8d2a739cec4e
- SSDEEP 3072:6e7WpP9oVLQthbYY9oVLQthbUvne7WpP9oVLQthbYY9oVLQthbUv5:RqAmqAh
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Renames multiple (3922) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory