Overview

overview

9

Static

static

3

01a69c17a3...cs.exe

windows7-x64

9

01a69c17a3...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01a69c17a3fa5e4b498604e8555f4720_NeikiAnalytics

  • Size

    170KB

  • Sample

    240511-pe5z3sad84

  • MD5

    01a69c17a3fa5e4b498604e8555f4720

  • SHA1

    96cf1e57a9a6684218c141ea97261ebf770a2518

  • SHA256

    1ebc2cd533ee968a26475897d0b4c34cbce8136a61726c7d0a84ef70385bc256

  • SHA512

    cb4566ea9d554d43ef26decd9897822f9d1685d83530e3c9b7d56495525ca74f88a27b2ab7ca1dd104f4a0cb3e17afacff5d43efa977706b298aecc72747bc51

  • SSDEEP

    3072:6DWpDWYPxPTJe4cjWEjWUDWpDWYPxPTJe4cjWEjWI:dDPxPTJAj9j2DPxPTJAj9jr

Score
9/10
ransomware

Malware Config

Targets

    • Target

      01a69c17a3fa5e4b498604e8555f4720_NeikiAnalytics

    • Size

      170KB

    • MD5

      01a69c17a3fa5e4b498604e8555f4720

    • SHA1

      96cf1e57a9a6684218c141ea97261ebf770a2518

    • SHA256

      1ebc2cd533ee968a26475897d0b4c34cbce8136a61726c7d0a84ef70385bc256

    • SHA512

      cb4566ea9d554d43ef26decd9897822f9d1685d83530e3c9b7d56495525ca74f88a27b2ab7ca1dd104f4a0cb3e17afacff5d43efa977706b298aecc72747bc51

    • SSDEEP

      3072:6DWpDWYPxPTJe4cjWEjWUDWpDWYPxPTJe4cjWEjWI:dDPxPTJAj9j2DPxPTJAj9jr

    Score
    9/10
    ransomware

    • Renames multiple (451) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks