Overview

overview

9

Static

static

3

891a2ceb8d...cs.exe

windows7-x64

9

891a2ceb8d...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    891a2ceb8d30d3471b09c0f7129a9c90_NeikiAnalytics

  • Size

    134KB

  • Sample

    240511-f8hxzaga5v

  • MD5

    891a2ceb8d30d3471b09c0f7129a9c90

  • SHA1

    8be0c4fed0796240dd88d3eff87222744b58c87f

  • SHA256

    d9b253ee25b74d132850ef073e34648929f3c2199bf3667df295312969a53d11

  • SHA512

    2774c02ea6cee722b8d589473d798ec573f7800f20f382093632c00c008d41a09752b12e80363d7097445b106b291435e7fe1f4d77ba529f73c1dbd8ebb804c0

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBP:PqFF2Ie+ef1qFF2Ie+efK

Score
9/10
ransomware

Malware Config

Targets

    • Target

      891a2ceb8d30d3471b09c0f7129a9c90_NeikiAnalytics

    • Size

      134KB

    • MD5

      891a2ceb8d30d3471b09c0f7129a9c90

    • SHA1

      8be0c4fed0796240dd88d3eff87222744b58c87f

    • SHA256

      d9b253ee25b74d132850ef073e34648929f3c2199bf3667df295312969a53d11

    • SHA512

      2774c02ea6cee722b8d589473d798ec573f7800f20f382093632c00c008d41a09752b12e80363d7097445b106b291435e7fe1f4d77ba529f73c1dbd8ebb804c0

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBP:PqFF2Ie+ef1qFF2Ie+efK

    Score
    9/10
    ransomware

    • Renames multiple (549) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks