Overview

overview

9

Static

static

7

5b19ad7c3f...cs.exe

windows7-x64

9

5b19ad7c3f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b19ad7c3f5b178696e1c30485d69d50_NeikiAnalytics

  • Size

    107KB

  • Sample

    240512-zsyg9saf44

  • MD5

    5b19ad7c3f5b178696e1c30485d69d50

  • SHA1

    6f6635be18275edfcf63c069991a130a56fa683a

  • SHA256

    ee1935d98851e10568ca4c2aa9de6fc6489b4a31ba5244dd6a090a8d32d52ff6

  • SHA512

    fc0f58fefe18793653e4353749e839675f3e8f1105578a33a93a54b11eb9dd249c7dc003b8c59738dd7fa06827751eb6b64330128f6c89e2cee0649d3d601259

  • SSDEEP

    1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfRbD:hfAIuZAIuYSMjoqtMHfhfd

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      5b19ad7c3f5b178696e1c30485d69d50_NeikiAnalytics

    • Size

      107KB

    • MD5

      5b19ad7c3f5b178696e1c30485d69d50

    • SHA1

      6f6635be18275edfcf63c069991a130a56fa683a

    • SHA256

      ee1935d98851e10568ca4c2aa9de6fc6489b4a31ba5244dd6a090a8d32d52ff6

    • SHA512

      fc0f58fefe18793653e4353749e839675f3e8f1105578a33a93a54b11eb9dd249c7dc003b8c59738dd7fa06827751eb6b64330128f6c89e2cee0649d3d601259

    • SSDEEP

      1536:Isz1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCow8hfRbD:hfAIuZAIuYSMjoqtMHfhfd

    Score
    9/10
    ransomwareupx

    • Renames multiple (3428) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks