Overview

overview

9

Static

static

7

1541a49142...cs.exe

windows7-x64

9

1541a49142...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1541a49142ff44d8981a0f8678f6af10_NeikiAnalytics

  • Size

    111KB

  • Sample

    240512-qq3jrsbf55

  • MD5

    1541a49142ff44d8981a0f8678f6af10

  • SHA1

    265329d13bcaf602140e3f636fd29905e1376bab

  • SHA256

    872ebd9ed967038940e534daa4492f9407fd3c7970a4b5ebcc570788c24d76f2

  • SHA512

    64b2212b34b2befe915b045df1aaa20ead6daa0c517ea3e96ae1619fe4534f35e3102fc4e48adcaf368117126e7f358954435d8c69b1c49deb71d68073a707e6

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf5SI:hfAIuZAIuYSMjoqtMHfhf5Ssk8

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1541a49142ff44d8981a0f8678f6af10_NeikiAnalytics

    • Size

      111KB

    • MD5

      1541a49142ff44d8981a0f8678f6af10

    • SHA1

      265329d13bcaf602140e3f636fd29905e1376bab

    • SHA256

      872ebd9ed967038940e534daa4492f9407fd3c7970a4b5ebcc570788c24d76f2

    • SHA512

      64b2212b34b2befe915b045df1aaa20ead6daa0c517ea3e96ae1619fe4534f35e3102fc4e48adcaf368117126e7f358954435d8c69b1c49deb71d68073a707e6

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hf5SI:hfAIuZAIuYSMjoqtMHfhf5Ssk8

    Score
    9/10
    ransomwareupx

    • Renames multiple (3444) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks