Overview

overview

9

Static

static

3

bf24a462b6...cs.exe

windows7-x64

9

bf24a462b6...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf24a462b64b01517c0d54946b1e4410_NeikiAnalytics

  • Size

    118KB

  • Sample

    240513-vny6safh27

  • MD5

    bf24a462b64b01517c0d54946b1e4410

  • SHA1

    c1729d087ca680627644ba7cbe613f240f25bd44

  • SHA256

    8312b9e19c65429815dc2b788085c6c3efb9ffea174a3720d8c2fb6b395a3efe

  • SHA512

    b9dc84abb65b34952bcf8d11fe6af054f450af53d2d945376ca5b5cdf889b6f35cc7f2f97c8fce33ded958a473503db7b7ae1dde95627c1f86f4cba0d4ce4649

  • SSDEEP

    1536:W7ZDpApYbWjy0e+eaN1NdNA7ZDpApYbWjy0e+eaN1NdNe:6DWpBe+e2zKDWpBe+e2zc

Score
9/10
ransomware

Malware Config

Targets

    • Target

      bf24a462b64b01517c0d54946b1e4410_NeikiAnalytics

    • Size

      118KB

    • MD5

      bf24a462b64b01517c0d54946b1e4410

    • SHA1

      c1729d087ca680627644ba7cbe613f240f25bd44

    • SHA256

      8312b9e19c65429815dc2b788085c6c3efb9ffea174a3720d8c2fb6b395a3efe

    • SHA512

      b9dc84abb65b34952bcf8d11fe6af054f450af53d2d945376ca5b5cdf889b6f35cc7f2f97c8fce33ded958a473503db7b7ae1dde95627c1f86f4cba0d4ce4649

    • SSDEEP

      1536:W7ZDpApYbWjy0e+eaN1NdNA7ZDpApYbWjy0e+eaN1NdNe:6DWpBe+e2zKDWpBe+e2zc

    Score
    9/10
    ransomware

    • Renames multiple (4560) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks