Overview

overview

9

Static

static

3

7b38c3107f...cs.exe

windows7-x64

9

7b38c3107f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b38c3107faaa7ad759d4f588df1aad0_NeikiAnalytics

  • Size

    152KB

  • Sample

    240510-fygxxsge35

  • MD5

    7b38c3107faaa7ad759d4f588df1aad0

  • SHA1

    e3ab549e3863b18e4d9b6cc4884cbe5aa221e889

  • SHA256

    41bf5aeac945356e7271c4580158f24c6b2760d2f389232cf7901cca56407bb6

  • SHA512

    790d6ad7f8348daec6cf6c8abc39a885374c5f8e0616bf2e8a202bb557671c4adee9d88a3fddb7029a0cc6b194a7dafb4eeac538dce257332e5d56c457eee5a4

  • SSDEEP

    3072:6e7WpnhkElEa0NQn0NQfe7WpnhkElEa0NQn0NQG:RqthKqthC

Score
9/10
ransomware

Malware Config

Targets

    • Target

      7b38c3107faaa7ad759d4f588df1aad0_NeikiAnalytics

    • Size

      152KB

    • MD5

      7b38c3107faaa7ad759d4f588df1aad0

    • SHA1

      e3ab549e3863b18e4d9b6cc4884cbe5aa221e889

    • SHA256

      41bf5aeac945356e7271c4580158f24c6b2760d2f389232cf7901cca56407bb6

    • SHA512

      790d6ad7f8348daec6cf6c8abc39a885374c5f8e0616bf2e8a202bb557671c4adee9d88a3fddb7029a0cc6b194a7dafb4eeac538dce257332e5d56c457eee5a4

    • SSDEEP

      3072:6e7WpnhkElEa0NQn0NQfe7WpnhkElEa0NQn0NQG:RqthKqthC

    Score
    9/10
    ransomware

    • Renames multiple (4467) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks