Overview

overview

9

Static

static

3

440c92b858...cs.exe

windows7-x64

9

440c92b858...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    440c92b85876c782d99a6ec563760220_NeikiAnalytics

  • Size

    164KB

  • Sample

    240512-xp9p1sbe81

  • MD5

    440c92b85876c782d99a6ec563760220

  • SHA1

    91e06335500ed3ced0fae5bed53c5c0180c77f2a

  • SHA256

    b669a3cc193b86c25fdf2be273530c4d8ed64d0d04b33d02eefff7b62f6784e2

  • SHA512

    912da4a0096915d6a57b77490e7f2c08d6e188684e448ce9f36593dba547f616150560d772c0f0e4e12717491886d68749a9b4891a6dfda904b272bd89e651e1

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZje7WpMaxeb0CYJ97lEYNR73e+eKZU:RqKvb0CYJ973e+eKZiqKvb0CYJ973e+W

Score
9/10
ransomware

Malware Config

Targets

    • Target

      440c92b85876c782d99a6ec563760220_NeikiAnalytics

    • Size

      164KB

    • MD5

      440c92b85876c782d99a6ec563760220

    • SHA1

      91e06335500ed3ced0fae5bed53c5c0180c77f2a

    • SHA256

      b669a3cc193b86c25fdf2be273530c4d8ed64d0d04b33d02eefff7b62f6784e2

    • SHA512

      912da4a0096915d6a57b77490e7f2c08d6e188684e448ce9f36593dba547f616150560d772c0f0e4e12717491886d68749a9b4891a6dfda904b272bd89e651e1

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZje7WpMaxeb0CYJ97lEYNR73e+eKZU:RqKvb0CYJ973e+eKZiqKvb0CYJ973e+W

    Score
    9/10
    ransomware

    • Renames multiple (3770) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks