Overview

overview

9

Static

static

3

7dea15d058...cs.exe

windows7-x64

9

7dea15d058...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7dea15d05881d64143863344201514c0_NeikiAnalytics

  • Size

    143KB

  • Sample

    240510-f5x8gsde7t

  • MD5

    7dea15d05881d64143863344201514c0

  • SHA1

    0bc3cc9a29e8a80f3e7147ca283b5c295cfbed4e

  • SHA256

    bc6b9e7ef90c0ba0f72163766876db072f5fabe1966a6a59f0ec9b5e8331dc1d

  • SHA512

    6e14933654e69f63935a191e819a4c688b5076060958ca13fee64bcfddc1bde89b9bd028e81a8cb7a3e7f7cbb865d9de3d5cc4d9f6804428ec7bbf2f70e71086

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZLe7WpMaxeb0CYJ97lEYNR73e+eKZE:RqKvb0CYJ973e+eKZKqKvb0CYJ973e+C

Score
9/10
ransomware

Malware Config

Targets

    • Target

      7dea15d05881d64143863344201514c0_NeikiAnalytics

    • Size

      143KB

    • MD5

      7dea15d05881d64143863344201514c0

    • SHA1

      0bc3cc9a29e8a80f3e7147ca283b5c295cfbed4e

    • SHA256

      bc6b9e7ef90c0ba0f72163766876db072f5fabe1966a6a59f0ec9b5e8331dc1d

    • SHA512

      6e14933654e69f63935a191e819a4c688b5076060958ca13fee64bcfddc1bde89b9bd028e81a8cb7a3e7f7cbb865d9de3d5cc4d9f6804428ec7bbf2f70e71086

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZLe7WpMaxeb0CYJ97lEYNR73e+eKZE:RqKvb0CYJ973e+eKZKqKvb0CYJ973e+C

    Score
    9/10
    ransomware

    • Renames multiple (734) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks