General

  • Target

    3b5c0872749520776f93a06902228f9bd6d46df39092304a97d207584a1ce4f0_NeikiAnalytics.exe

  • Size

    45KB

  • Sample

    240629-ata1xswepc

  • MD5

    8ac1ff2098fdf0d7f1aa0992a230bff0

  • SHA1

    6097a775fe4f1bd9b189275727f853dd6093e986

  • SHA256

    3b5c0872749520776f93a06902228f9bd6d46df39092304a97d207584a1ce4f0

  • SHA512

    66847c2210537e4a0c165d15b5907ceb9cb427840157953bf9483ab0f0ce40f3c3bf83b0fd07aa8a536064f00ba6c015bc73ccd403a9bf8a8a3413e82e6c086f

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAF6+:CTWn1++PJHJXA/OsIZfzc3/Q8n

Score
9/10

Malware Config

Targets

    • Target

      3b5c0872749520776f93a06902228f9bd6d46df39092304a97d207584a1ce4f0_NeikiAnalytics.exe

    • Size

      45KB

    • MD5

      8ac1ff2098fdf0d7f1aa0992a230bff0

    • SHA1

      6097a775fe4f1bd9b189275727f853dd6093e986

    • SHA256

      3b5c0872749520776f93a06902228f9bd6d46df39092304a97d207584a1ce4f0

    • SHA512

      66847c2210537e4a0c165d15b5907ceb9cb427840157953bf9483ab0f0ce40f3c3bf83b0fd07aa8a536064f00ba6c015bc73ccd403a9bf8a8a3413e82e6c086f

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAF6+:CTWn1++PJHJXA/OsIZfzc3/Q8n

    Score
    9/10
    • Renames multiple (3468) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks