Overview

overview

9

Static

static

3

fdfe449703...KI.exe

windows7-x64

9

fdfe449703...KI.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdfe449703599d75f2a1536ea7104cd0_NEIKI

  • Size

    158KB

  • Sample

    240508-tg2snace4v

  • MD5

    fdfe449703599d75f2a1536ea7104cd0

  • SHA1

    bd495324abdb03444269f456bd0a4c0ece46243c

  • SHA256

    59f0d62a9c7c8a0d7492b19032a34b8c3ae23818eb8c175fb0a42a28481f0fea

  • SHA512

    3e5a7aabeab13c1b1f0531a4813666e5d614baeb62857f58f897758664582df66816623a349c41f3cce1c2ae000991718966abc5764bc709fb19037fac1202bf

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR7ZtR3031e7WpMaxeb0CYJ97lEYNR7ZtE:RqKvb0CYJ97PqKvb0CYJ97A

Score
9/10
ransomware

Malware Config

Targets

    • Target

      fdfe449703599d75f2a1536ea7104cd0_NEIKI

    • Size

      158KB

    • MD5

      fdfe449703599d75f2a1536ea7104cd0

    • SHA1

      bd495324abdb03444269f456bd0a4c0ece46243c

    • SHA256

      59f0d62a9c7c8a0d7492b19032a34b8c3ae23818eb8c175fb0a42a28481f0fea

    • SHA512

      3e5a7aabeab13c1b1f0531a4813666e5d614baeb62857f58f897758664582df66816623a349c41f3cce1c2ae000991718966abc5764bc709fb19037fac1202bf

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR7ZtR3031e7WpMaxeb0CYJ97lEYNR7ZtE:RqKvb0CYJ97PqKvb0CYJ97A

    Score
    9/10
    ransomware

    • Renames multiple (3833) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks