Overview

overview

9

Static

static

7

0eeb85d147...KI.exe

windows7-x64

9

0eeb85d147...KI.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0eeb85d147e84f6d7499bdc2766352b0_NEIKI

  • Size

    105KB

  • Sample

    240507-x5376sec86

  • MD5

    0eeb85d147e84f6d7499bdc2766352b0

  • SHA1

    8de3e51f61b50d1b236b28bad53a74bb9a170ff6

  • SHA256

    37891e792d35b80f3c6293ce93afb9531343005595daa94fb5ee84db4867d108

  • SHA512

    5f424ca61aa10c77441f9dea688533774d30850bcc758b408e9131a8cde8fb74110cd06ba268719b7f302a98f60f1445318b43d114b0e5a0b78de64a3452cf41

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfdIU:hfAIuZAIuYSMjoqtMHfhfdIyIo

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      0eeb85d147e84f6d7499bdc2766352b0_NEIKI

    • Size

      105KB

    • MD5

      0eeb85d147e84f6d7499bdc2766352b0

    • SHA1

      8de3e51f61b50d1b236b28bad53a74bb9a170ff6

    • SHA256

      37891e792d35b80f3c6293ce93afb9531343005595daa94fb5ee84db4867d108

    • SHA512

      5f424ca61aa10c77441f9dea688533774d30850bcc758b408e9131a8cde8fb74110cd06ba268719b7f302a98f60f1445318b43d114b0e5a0b78de64a3452cf41

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfdIU:hfAIuZAIuYSMjoqtMHfhfdIyIo

    Score
    9/10
    ransomwareupx

    • Renames multiple (322) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks