Overview

overview

9

Static

static

3

2bfb0ca628...cs.exe

windows7-x64

9

2bfb0ca628...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bfb0ca6284dcb73ef75e0cea14da7a0_NeikiAnalytics

  • Size

    150KB

  • Sample

    240510-3gahvaga4x

  • MD5

    2bfb0ca6284dcb73ef75e0cea14da7a0

  • SHA1

    034b58ff3adc90466afa17c32d6102546673dd53

  • SHA256

    60754d0f3af6c01536db846e0ba0918c20365c90d8999bd1b855395e60321564

  • SHA512

    135d54a101df9b4c559fbdc364211924399faa85589bf84cc2c7ea58476f5d267c74e654b9fbf3cf9cc180e88bed7f861a37659dba2a6572166207e955551b69

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZz7Tib+1FR4eCLOhj0Yiexjm:RqKvb0CYJ973e+eKZz7TiGFRkC0t

Score
9/10
ransomware

Malware Config

Targets

    • Target

      2bfb0ca6284dcb73ef75e0cea14da7a0_NeikiAnalytics

    • Size

      150KB

    • MD5

      2bfb0ca6284dcb73ef75e0cea14da7a0

    • SHA1

      034b58ff3adc90466afa17c32d6102546673dd53

    • SHA256

      60754d0f3af6c01536db846e0ba0918c20365c90d8999bd1b855395e60321564

    • SHA512

      135d54a101df9b4c559fbdc364211924399faa85589bf84cc2c7ea58476f5d267c74e654b9fbf3cf9cc180e88bed7f861a37659dba2a6572166207e955551b69

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZz7Tib+1FR4eCLOhj0Yiexjm:RqKvb0CYJ973e+eKZz7TiGFRkC0t

    Score
    9/10
    ransomware

    • Renames multiple (3219) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks