Overview

overview

9

Static

static

7

30dad2d19d...cs.exe

windows7-x64

9

30dad2d19d...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    30dad2d19d4a554b620a748b28eaf6c0_NeikiAnalytics

  • Size

    166KB

  • Sample

    240511-yf249aec2t

  • MD5

    30dad2d19d4a554b620a748b28eaf6c0

  • SHA1

    6dda1a4a41cafa04f7e42136d4117bf397eb9f93

  • SHA256

    e0b8453b2efbe4ce4d91c490444092a28ddf97687e1cd72fef98c15f46e156cd

  • SHA512

    07e88768bdb2446f16497d57bab679f1e797cc6be83793615ca738586f491bacb742dac5489e6d6698871eaa5fc6b8782b79dea018961b8db5eeadb3f12fe7d2

  • SSDEEP

    3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuS:JiQSo1EZGtKgZGtK/CAIuZAIuS

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      30dad2d19d4a554b620a748b28eaf6c0_NeikiAnalytics

    • Size

      166KB

    • MD5

      30dad2d19d4a554b620a748b28eaf6c0

    • SHA1

      6dda1a4a41cafa04f7e42136d4117bf397eb9f93

    • SHA256

      e0b8453b2efbe4ce4d91c490444092a28ddf97687e1cd72fef98c15f46e156cd

    • SHA512

      07e88768bdb2446f16497d57bab679f1e797cc6be83793615ca738586f491bacb742dac5489e6d6698871eaa5fc6b8782b79dea018961b8db5eeadb3f12fe7d2

    • SSDEEP

      3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIuS:JiQSo1EZGtKgZGtK/CAIuZAIuS

    Score
    9/10
    ransomwareupx

    • Renames multiple (409) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks