Overview

overview

9

Static

static

7

5cd97688e8...KI.exe

windows7-x64

9

5cd97688e8...KI.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5cd97688e859a3bd91680b3cd4ade970_NEIKI

  • Size

    92KB

  • Sample

    240507-21kmgsda3w

  • MD5

    5cd97688e859a3bd91680b3cd4ade970

  • SHA1

    d03173c9e509627a8c4a3c8524b0e446d31ebabc

  • SHA256

    a87b928c532b8dc5fabf957590e693f6bb58b3049573ada5d27aee7de30134eb

  • SHA512

    4e64806103f7d5380cb2678924bfb016f94467529792fcd2563014d2e791e8cbbf7faca8f4746025b7d172e90a8848dd67bbf9786e135e124631f9080be13e48

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOt3:+nyiQSo1EZGtKgZGtK/Px

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      5cd97688e859a3bd91680b3cd4ade970_NEIKI

    • Size

      92KB

    • MD5

      5cd97688e859a3bd91680b3cd4ade970

    • SHA1

      d03173c9e509627a8c4a3c8524b0e446d31ebabc

    • SHA256

      a87b928c532b8dc5fabf957590e693f6bb58b3049573ada5d27aee7de30134eb

    • SHA512

      4e64806103f7d5380cb2678924bfb016f94467529792fcd2563014d2e791e8cbbf7faca8f4746025b7d172e90a8848dd67bbf9786e135e124631f9080be13e48

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOt3:+nyiQSo1EZGtKgZGtK/Px

    Score
    9/10
    ransomwareupx

    • Renames multiple (514) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks