Overview

overview

9

Static

static

3

7fc5ee4d46...cs.exe

windows7-x64

9

7fc5ee4d46...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7fc5ee4d4643855264007b77f32a3cb0_NeikiAnalytics

  • Size

    142KB

  • Sample

    240510-f9stkahc45

  • MD5

    7fc5ee4d4643855264007b77f32a3cb0

  • SHA1

    9aeb4b577dd05468ff96fcc1c23067a96df73d76

  • SHA256

    89430d5e7642d781dbfe1a204f97ec3acde3f6b9e1cb7e11cc1cb64cf48efcc0

  • SHA512

    16e83fb80e3f0cae25799fe4ad4e7bcf962e2d2ff2f3c16b792914120ad9e60b31eb26a35e24cee4f317a42b1a0e6319dd0dd8014e7387a4c572be76940464d2

  • SSDEEP

    3072:6e7WpP9oVLQthbYY9oVLQthbUrt7tryqe7WpP9oVLQthbYY9oVLQthbUrt7tryI:RqA/yBqA/yI

Score
9/10
ransomware

Malware Config

Targets

    • Target

      7fc5ee4d4643855264007b77f32a3cb0_NeikiAnalytics

    • Size

      142KB

    • MD5

      7fc5ee4d4643855264007b77f32a3cb0

    • SHA1

      9aeb4b577dd05468ff96fcc1c23067a96df73d76

    • SHA256

      89430d5e7642d781dbfe1a204f97ec3acde3f6b9e1cb7e11cc1cb64cf48efcc0

    • SHA512

      16e83fb80e3f0cae25799fe4ad4e7bcf962e2d2ff2f3c16b792914120ad9e60b31eb26a35e24cee4f317a42b1a0e6319dd0dd8014e7387a4c572be76940464d2

    • SSDEEP

      3072:6e7WpP9oVLQthbYY9oVLQthbUrt7tryqe7WpP9oVLQthbYY9oVLQthbUrt7tryI:RqA/yBqA/yI

    Score
    9/10
    ransomware

    • Renames multiple (1033) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks