Overview

overview

9

Static

static

3

6085c0ecb4...KI.exe

windows7-x64

9

6085c0ecb4...KI.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    6085c0ecb41f6903529b9e43839ffe60_NEIKI

  • Size

    178KB

  • Sample

    240508-1dtffaba73

  • MD5

    6085c0ecb41f6903529b9e43839ffe60

  • SHA1

    51e2a630e5ccfafb3e396d455a59e2b5ab8d8c86

  • SHA256

    40b8d46c33cf7115f67effc8180d626140b312eadb76ef8fb0d2c6318bd11863

  • SHA512

    951758a8a9da8309125c24e1055a1da18c676e9dc957a1d52afe5299261d2b4be21d766a921b22cabdf47b025b01e7a5006998a8ae1d9255a64b2e35adc62eb0

  • SSDEEP

    3072:6e7WpHIyRF9ESWu0SWuDmSXrw3Mtr0srI79aegeAc7:RqlIyFESWu0SWu2sG9aPE

Score
9/10
ransomware

Malware Config

Targets

    • Target

      6085c0ecb41f6903529b9e43839ffe60_NEIKI

    • Size

      178KB

    • MD5

      6085c0ecb41f6903529b9e43839ffe60

    • SHA1

      51e2a630e5ccfafb3e396d455a59e2b5ab8d8c86

    • SHA256

      40b8d46c33cf7115f67effc8180d626140b312eadb76ef8fb0d2c6318bd11863

    • SHA512

      951758a8a9da8309125c24e1055a1da18c676e9dc957a1d52afe5299261d2b4be21d766a921b22cabdf47b025b01e7a5006998a8ae1d9255a64b2e35adc62eb0

    • SSDEEP

      3072:6e7WpHIyRF9ESWu0SWuDmSXrw3Mtr0srI79aegeAc7:RqlIyFESWu0SWu2sG9aPE

    Score
    9/10
    ransomware

    • Renames multiple (3222) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks