Overview

overview

9

Static

static

3

a3f801226c...KI.exe

windows7-x64

9

a3f801226c...KI.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3f801226c14b8be5ed6ed4dfd8e9b30_NEIKI

  • Size

    95KB

  • Sample

    240508-pcs8haec86

  • MD5

    a3f801226c14b8be5ed6ed4dfd8e9b30

  • SHA1

    6f1a04e07533b6b52cc3071bf48715fef1bd7577

  • SHA256

    9bb1b7aa918b0bc989a78c0a94e498bb41a1e7351e0ad92e7d8f16080276fb27

  • SHA512

    65b516a450ac2d290efe2a7a76b68936b94d3cbf3ef31ec94d9844c33af1227ebe1a2286b470c3c0f56ad3fca311eb96925ad813701c8a4dd2411f771af89f87

  • SSDEEP

    1536:W7ZhA7pApH1IwVHykEElEa0NQn0NQie+eeaA:6e7WpnhkElEa0NQn0NQie+eeaA

Score
9/10
ransomware

Malware Config

Targets

    • Target

      a3f801226c14b8be5ed6ed4dfd8e9b30_NEIKI

    • Size

      95KB

    • MD5

      a3f801226c14b8be5ed6ed4dfd8e9b30

    • SHA1

      6f1a04e07533b6b52cc3071bf48715fef1bd7577

    • SHA256

      9bb1b7aa918b0bc989a78c0a94e498bb41a1e7351e0ad92e7d8f16080276fb27

    • SHA512

      65b516a450ac2d290efe2a7a76b68936b94d3cbf3ef31ec94d9844c33af1227ebe1a2286b470c3c0f56ad3fca311eb96925ad813701c8a4dd2411f771af89f87

    • SSDEEP

      1536:W7ZhA7pApH1IwVHykEElEa0NQn0NQie+eeaA:6e7WpnhkElEa0NQn0NQie+eeaA

    Score
    9/10
    ransomware

    • Renames multiple (513) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks