Overview

overview

9

Static

static

7

9ea78aae27...KI.exe

windows7-x64

9

9ea78aae27...KI.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ea78aae270a0ef695d95915e2e548c0_NEIKI

  • Size

    105KB

  • Sample

    240508-cdwc2acf4t

  • MD5

    9ea78aae270a0ef695d95915e2e548c0

  • SHA1

    80b3dc9e5d9f86ac7aed063e315a9e394eec43f9

  • SHA256

    dc874de3fd00b00ba3777c0ea3b460b23bf2d75e276abc3ff277cd9945acae07

  • SHA512

    51c1006f73a9833053219a0558e8ca2d859d49c64a5b6f53c13b92ed09d8e5782abdfb58bea5d2b34966f8e735979f17f5a70605791fafd9f6998313d6af45a0

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfO:hfAIuZAIuYSMjoqtMHfhfO

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      9ea78aae270a0ef695d95915e2e548c0_NEIKI

    • Size

      105KB

    • MD5

      9ea78aae270a0ef695d95915e2e548c0

    • SHA1

      80b3dc9e5d9f86ac7aed063e315a9e394eec43f9

    • SHA256

      dc874de3fd00b00ba3777c0ea3b460b23bf2d75e276abc3ff277cd9945acae07

    • SHA512

      51c1006f73a9833053219a0558e8ca2d859d49c64a5b6f53c13b92ed09d8e5782abdfb58bea5d2b34966f8e735979f17f5a70605791fafd9f6998313d6af45a0

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfO:hfAIuZAIuYSMjoqtMHfhfO

    Score
    9/10
    ransomwareupx

    • Renames multiple (3437) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks