Overview

overview

9

Static

static

3

32e6e8f658...KI.exe

windows7-x64

9

32e6e8f658...KI.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    32e6e8f6585f96e2caee27c4b42cf010_NEIKI

  • Size

    97KB

  • Sample

    240508-kn9x6sef53

  • MD5

    32e6e8f6585f96e2caee27c4b42cf010

  • SHA1

    82d3843aeeebebf0b16ed2fe6335971c6b3999a2

  • SHA256

    b250b1398fdbd171298754257bac46fa21a7c032b232d0ba96cb8282c2f624b1

  • SHA512

    1a1020861ea58a10476e2a74739dcfd834827f4c011a1e7df1e6dd0eca0a3562e44d9d5cec9e3a6775495c3de6f0464f683a7edc6a29ce61acb2e9a3355f25ff

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNzOmOm:6rWpcOPxPke+e3fFpsJOfFpsJbgEhT9

Score
9/10
ransomware

Malware Config

Targets

    • Target

      32e6e8f6585f96e2caee27c4b42cf010_NEIKI

    • Size

      97KB

    • MD5

      32e6e8f6585f96e2caee27c4b42cf010

    • SHA1

      82d3843aeeebebf0b16ed2fe6335971c6b3999a2

    • SHA256

      b250b1398fdbd171298754257bac46fa21a7c032b232d0ba96cb8282c2f624b1

    • SHA512

      1a1020861ea58a10476e2a74739dcfd834827f4c011a1e7df1e6dd0eca0a3562e44d9d5cec9e3a6775495c3de6f0464f683a7edc6a29ce61acb2e9a3355f25ff

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNzOmOm:6rWpcOPxPke+e3fFpsJOfFpsJbgEhT9

    Score
    9/10
    ransomware

    • Renames multiple (3458) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks