Overview

overview

9

Static

static

3

0e468dd566...KI.exe

windows7-x64

9

0e468dd566...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e468dd56666d65809964cefb955f2d0_NEIKI

  • Size

    100KB

  • Sample

    240507-x42b7aec26

  • MD5

    0e468dd56666d65809964cefb955f2d0

  • SHA1

    46b786b346e391992393513f11506d1326869328

  • SHA256

    ea4b44c013888a31d4398d6cfb29444bf2bd7cf44259e9fe8102254332408159

  • SHA512

    90d3694c6908c5213d0a959838101174ebbf0d48912f683d545c41d6e2e2031bf189a3e1a6eb80df4fc67c451741bffbce4091e2fe0db70e3bd74f43043143d0

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPI0OSs:6rWpcOPxPke+e3fFpsJOfFpsJbgE2

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0e468dd56666d65809964cefb955f2d0_NEIKI

    • Size

      100KB

    • MD5

      0e468dd56666d65809964cefb955f2d0

    • SHA1

      46b786b346e391992393513f11506d1326869328

    • SHA256

      ea4b44c013888a31d4398d6cfb29444bf2bd7cf44259e9fe8102254332408159

    • SHA512

      90d3694c6908c5213d0a959838101174ebbf0d48912f683d545c41d6e2e2031bf189a3e1a6eb80df4fc67c451741bffbce4091e2fe0db70e3bd74f43043143d0

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPI0OSs:6rWpcOPxPke+e3fFpsJOfFpsJbgE2

    Score
    9/10
    ransomware

    • Renames multiple (3470) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks