Overview

overview

9

Static

static

3

5b501262b8...KI.exe

windows7-x64

9

5b501262b8...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b501262b89aba55aa3b122b8d9d3ae0_NEIKI

  • Size

    89KB

  • Sample

    240508-l7scxafc3z

  • MD5

    5b501262b89aba55aa3b122b8d9d3ae0

  • SHA1

    c4c4971ee1092980a545771b24e83769d8e95957

  • SHA256

    26a1af43535c4e62adcadca6773e1de82b510b022e107ab9e2d004b903cd1e10

  • SHA512

    32430fea81357f2d0e9577773d867007a8b63991923b6a1ddb30cd848e55a781d4f1e997e5fd346589f070c8fecf13bf8da990e716920e14cf9cf33b9046aff6

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNu:6rWpcOPxPke+e3fFpsJOfFpsJbgEU

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5b501262b89aba55aa3b122b8d9d3ae0_NEIKI

    • Size

      89KB

    • MD5

      5b501262b89aba55aa3b122b8d9d3ae0

    • SHA1

      c4c4971ee1092980a545771b24e83769d8e95957

    • SHA256

      26a1af43535c4e62adcadca6773e1de82b510b022e107ab9e2d004b903cd1e10

    • SHA512

      32430fea81357f2d0e9577773d867007a8b63991923b6a1ddb30cd848e55a781d4f1e997e5fd346589f070c8fecf13bf8da990e716920e14cf9cf33b9046aff6

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNu:6rWpcOPxPke+e3fFpsJOfFpsJbgEU

    Score
    9/10
    ransomware

    • Renames multiple (3506) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks