Overview

overview

9

Static

static

7

8b3576c4b0...KI.exe

windows7-x64

9

8b3576c4b0...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b3576c4b04fe76378ff35baeabaa820_NEIKI

  • Size

    96KB

  • Sample

    240508-bkdacsdb24

  • MD5

    8b3576c4b04fe76378ff35baeabaa820

  • SHA1

    77416c60fe224bada6995bd40d21347ec1b2ae70

  • SHA256

    7917842b3a2377835834a3d4b3e02da45d61edfdb2e7d534bd97fafc7f5f7781

  • SHA512

    c8f40e6c8d297890f491e4de191d58c8f786bcb4de0b83f2e3cfbb465eb212cecb71afc7fb1b757f2fada1390095758bd772a6569c896492091b63a03aa6aa64

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJim:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuV

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      8b3576c4b04fe76378ff35baeabaa820_NEIKI

    • Size

      96KB

    • MD5

      8b3576c4b04fe76378ff35baeabaa820

    • SHA1

      77416c60fe224bada6995bd40d21347ec1b2ae70

    • SHA256

      7917842b3a2377835834a3d4b3e02da45d61edfdb2e7d534bd97fafc7f5f7781

    • SHA512

      c8f40e6c8d297890f491e4de191d58c8f786bcb4de0b83f2e3cfbb465eb212cecb71afc7fb1b757f2fada1390095758bd772a6569c896492091b63a03aa6aa64

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJim:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuV

    Score
    9/10
    ransomwareupx

    • Renames multiple (3460) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks