Overview

overview

9

Static

static

3

4ff51f8c30...KI.exe

windows7-x64

9

4ff51f8c30...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI

  • Size

    71KB

  • Sample

    240507-2bqgfabc2w

  • MD5

    4ff51f8c302bd2e9b1d9db33c4aaded0

  • SHA1

    15a564c56c53bac83ae0ad24874550927c689eb1

  • SHA256

    b586527efd9711fc2c1e9f90c048c4bc03a89860ab47bfb277de0de8e092f498

  • SHA512

    ec0ea6d0bc1cb221e734828e831a5fc02e07f14b1c9ee0f176d0753000cd5c17a351f1d469936b075e6b57019d328bef7b39149c5e7f43feaf84bb41e731900d

  • SSDEEP

    1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696v:6e7WpXYvndv

Score
9/10
ransomware

Malware Config

Targets

    • Target

      4ff51f8c302bd2e9b1d9db33c4aaded0_NEIKI

    • Size

      71KB

    • MD5

      4ff51f8c302bd2e9b1d9db33c4aaded0

    • SHA1

      15a564c56c53bac83ae0ad24874550927c689eb1

    • SHA256

      b586527efd9711fc2c1e9f90c048c4bc03a89860ab47bfb277de0de8e092f498

    • SHA512

      ec0ea6d0bc1cb221e734828e831a5fc02e07f14b1c9ee0f176d0753000cd5c17a351f1d469936b075e6b57019d328bef7b39149c5e7f43feaf84bb41e731900d

    • SSDEEP

      1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOM2kJOMIsKsc696v:6e7WpXYvndv

    Score
    9/10
    ransomware

    • Renames multiple (3599) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks