Overview

overview

9

Static

static

7

96cbaa0576...cs.exe

windows7-x64

9

96cbaa0576...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    96cbaa057618beee86f48cb6d255ca90_NeikiAnalytics

  • Size

    128KB

  • Sample

    240510-hnaf7scc96

  • MD5

    96cbaa057618beee86f48cb6d255ca90

  • SHA1

    90f48cf24ec74bc4af6264aa032b46671be579d0

  • SHA256

    a1666602cd3e0c6e4bd8e32e7563b73c8729622416f30bd1c20f7c1f8b55b972

  • SHA512

    1820053625b9ae3ebfb2d52a9e688140302c21b849be1f51f07bc057c7a588ef3f1ce14987942399f6b20482b27030650d6b12a68d0ccb65a993ee039ae6b6dc

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhf5SGfFpsJOfFpsJl:JmCAIuZAIuDMVtM/XSd

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      96cbaa057618beee86f48cb6d255ca90_NeikiAnalytics

    • Size

      128KB

    • MD5

      96cbaa057618beee86f48cb6d255ca90

    • SHA1

      90f48cf24ec74bc4af6264aa032b46671be579d0

    • SHA256

      a1666602cd3e0c6e4bd8e32e7563b73c8729622416f30bd1c20f7c1f8b55b972

    • SHA512

      1820053625b9ae3ebfb2d52a9e688140302c21b849be1f51f07bc057c7a588ef3f1ce14987942399f6b20482b27030650d6b12a68d0ccb65a993ee039ae6b6dc

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhf5SGfFpsJOfFpsJl:JmCAIuZAIuDMVtM/XSd

    Score
    9/10
    ransomwareupx

    • Renames multiple (3460) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks