Overview

overview

9

Static

static

3

2867aacc90...cs.exe

windows7-x64

9

2867aacc90...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2867aacc9047f483b41d88d2e082bea0_NeikiAnalytics

  • Size

    181KB

  • Sample

    240510-vgehssah96

  • MD5

    2867aacc9047f483b41d88d2e082bea0

  • SHA1

    c8366b0c397d2dacff1da7cfe6fc63a4a682afbe

  • SHA256

    0ec0dfffc3ed38a0b218e798c04063ee8eac02062d9e4475d94e367db9732d12

  • SHA512

    2d96263829aa637ce2bbc15cbd1c8e347d1f9dd58d5e29296571b042f19c3a4ed754386f65093810209ff01e44a629a01dd5126e858cf303a93376c9fb42e0f6

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEfrWpcOPxPke+e3fFpsJOfFpsJbgEX:tFPxPke+eICFPxPke+eIX

Score
9/10
ransomware

Malware Config

Targets

    • Target

      2867aacc9047f483b41d88d2e082bea0_NeikiAnalytics

    • Size

      181KB

    • MD5

      2867aacc9047f483b41d88d2e082bea0

    • SHA1

      c8366b0c397d2dacff1da7cfe6fc63a4a682afbe

    • SHA256

      0ec0dfffc3ed38a0b218e798c04063ee8eac02062d9e4475d94e367db9732d12

    • SHA512

      2d96263829aa637ce2bbc15cbd1c8e347d1f9dd58d5e29296571b042f19c3a4ed754386f65093810209ff01e44a629a01dd5126e858cf303a93376c9fb42e0f6

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEfrWpcOPxPke+e3fFpsJOfFpsJbgEX:tFPxPke+eICFPxPke+eIX

    Score
    9/10
    ransomware

    • Renames multiple (3975) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks