Overview

overview

9

Static

static

7

dce40ac3b6...cs.exe

windows7-x64

9

dce40ac3b6...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dce40ac3b6582f52efe5a8a872bdc0d0_NeikiAnalytics

  • Size

    159KB

  • Sample

    240510-pd4evsgh97

  • MD5

    dce40ac3b6582f52efe5a8a872bdc0d0

  • SHA1

    3692df3b5e2bb97a0e781db0ff053ca0cd1c3b57

  • SHA256

    9f9e216e87b6fed7dff18119dd7f58306f08d031e5301429f7e74f5d3730f29f

  • SHA512

    d56baa07f4d65b89728d7ef1137b65043a5335ef4f3d31a343ccbcfdb1ab11238103f975735abfc59c6bc5a49e9ff4678e14240612bad2f3d483f5cf35b59d20

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJ4:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuy

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      dce40ac3b6582f52efe5a8a872bdc0d0_NeikiAnalytics

    • Size

      159KB

    • MD5

      dce40ac3b6582f52efe5a8a872bdc0d0

    • SHA1

      3692df3b5e2bb97a0e781db0ff053ca0cd1c3b57

    • SHA256

      9f9e216e87b6fed7dff18119dd7f58306f08d031e5301429f7e74f5d3730f29f

    • SHA512

      d56baa07f4d65b89728d7ef1137b65043a5335ef4f3d31a343ccbcfdb1ab11238103f975735abfc59c6bc5a49e9ff4678e14240612bad2f3d483f5cf35b59d20

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJ4:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuy

    Score
    9/10
    ransomwareupx

    • Renames multiple (335) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks