Overview

overview

9

Static

static

7

21d87a5c58...cs.exe

windows7-x64

9

21d87a5c58...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21d87a5c58d29772da4c13efeb85feb0_NeikiAnalytics

  • Size

    217KB

  • Sample

    240512-se7qfsef68

  • MD5

    21d87a5c58d29772da4c13efeb85feb0

  • SHA1

    2825706d0ddfe3cbe1d906ae112f06bb4d7a4a8a

  • SHA256

    cc96e7196494378b36f4baf1c43f62198435c3bdb7eaf68a10f24a8efebd5b6c

  • SHA512

    a25a5c05cf519914c256a362f0b8204c78d30e7dcccd9818e01fe39afa947dc3849aa14a044e6f1be186274f17b9948664622a09d61da75f386cb25709cb6585

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhf9fAIuZAIuYSMjoqtMHfhfCTx:JmCAIuZAIuDMVtM/LfAIuZAIuDMVtM/0

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      21d87a5c58d29772da4c13efeb85feb0_NeikiAnalytics

    • Size

      217KB

    • MD5

      21d87a5c58d29772da4c13efeb85feb0

    • SHA1

      2825706d0ddfe3cbe1d906ae112f06bb4d7a4a8a

    • SHA256

      cc96e7196494378b36f4baf1c43f62198435c3bdb7eaf68a10f24a8efebd5b6c

    • SHA512

      a25a5c05cf519914c256a362f0b8204c78d30e7dcccd9818e01fe39afa947dc3849aa14a044e6f1be186274f17b9948664622a09d61da75f386cb25709cb6585

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhf9fAIuZAIuYSMjoqtMHfhfCTx:JmCAIuZAIuDMVtM/LfAIuZAIuDMVtM/0

    Score
    9/10
    ransomwareupx

    • Renames multiple (315) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks