Overview

overview

9

Static

static

7

53be45a170...cs.exe

windows7-x64

9

53be45a170...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    53be45a170edfd654ca81fd7ad6957a0_NeikiAnalytics

  • Size

    109KB

  • Sample

    240509-rda5esdc4t

  • MD5

    53be45a170edfd654ca81fd7ad6957a0

  • SHA1

    78894d91c5f9fcdedeed75db1cd3c164cdead02b

  • SHA256

    14d7f7af93e9e0d79d9ff18448c88924fcc24c5e138f91ec5421cc3d8d95e835

  • SHA512

    65abe72446ab3d62502ca9724f93dd0c409f9263fb627101c2698c0dcbfbd0ebfb7d3ee4f94e6f26becd9351c48f342cdb58b3608c2cb556b4357205ad90eb28

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZx7Zf/FAxTWY1++PJHJXA/OsIZtosbosH:+nyiOnyi8XH

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      53be45a170edfd654ca81fd7ad6957a0_NeikiAnalytics

    • Size

      109KB

    • MD5

      53be45a170edfd654ca81fd7ad6957a0

    • SHA1

      78894d91c5f9fcdedeed75db1cd3c164cdead02b

    • SHA256

      14d7f7af93e9e0d79d9ff18448c88924fcc24c5e138f91ec5421cc3d8d95e835

    • SHA512

      65abe72446ab3d62502ca9724f93dd0c409f9263fb627101c2698c0dcbfbd0ebfb7d3ee4f94e6f26becd9351c48f342cdb58b3608c2cb556b4357205ad90eb28

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZx7Zf/FAxTWY1++PJHJXA/OsIZtosbosH:+nyiOnyi8XH

    Score
    9/10
    ransomwareupx

    • Renames multiple (4945) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks