Overview

overview

9

Static

static

7

4e9fdc4e92...cs.exe

windows7-x64

9

4e9fdc4e92...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e9fdc4e9210b517a279d37023811f10_NeikiAnalytics

  • Size

    222KB

  • Sample

    240511-b2tzfagf58

  • MD5

    4e9fdc4e9210b517a279d37023811f10

  • SHA1

    53d1e41cf0a97d3251c89a403ad47fc06373135a

  • SHA256

    376929f11b274ed1e05adaa43b3be2e38c431cd3921b29f04a889935c26ec908

  • SHA512

    e6c88921e838519c9ff84babf48502bd4f8bcf307f0c9d9d018ab49b089e288d4a043d750aa415ecd01ad0ed019145aa475154e102f26bc6b61ea41e2799c7b4

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhf5SwEdfg3jcKj2od0MvCPXtjn:JmCAIuZAIuDMVtM/XSTfg3jcKjo

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      4e9fdc4e9210b517a279d37023811f10_NeikiAnalytics

    • Size

      222KB

    • MD5

      4e9fdc4e9210b517a279d37023811f10

    • SHA1

      53d1e41cf0a97d3251c89a403ad47fc06373135a

    • SHA256

      376929f11b274ed1e05adaa43b3be2e38c431cd3921b29f04a889935c26ec908

    • SHA512

      e6c88921e838519c9ff84babf48502bd4f8bcf307f0c9d9d018ab49b089e288d4a043d750aa415ecd01ad0ed019145aa475154e102f26bc6b61ea41e2799c7b4

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhf5SwEdfg3jcKj2od0MvCPXtjn:JmCAIuZAIuDMVtM/XSTfg3jcKjo

    Score
    9/10
    ransomwareupx

    • Renames multiple (3101) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks