Overview

overview

9

Static

static

3

5cd7a2998c...cs.exe

windows7-x64

9

5cd7a2998c...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cd7a2998c4b6d7d7d960c6394e83220_NeikiAnalytics

  • Size

    187KB

  • Sample

    240514-c6hmmsfg61

  • MD5

    5cd7a2998c4b6d7d7d960c6394e83220

  • SHA1

    5d257ffd5b4c717537a21eebbb2e592452857442

  • SHA256

    578ff807510ddc744da2d0e6b56c43d3c29a97502a06ef4bbb6a6395db0498c3

  • SHA512

    042bc4ac0e9ce83a43678bafa953b8810c5baa25af538b8460d547b44ae508d6cfda6af118217a002afa80f176cb1598f76612f0168ecb0d8a47ed8c7fb2a0f7

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgE8rWpcOPxPke+e3fFpsJOfFpsJbgESr9:tFPxPke+eILFPxPke+eIO

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5cd7a2998c4b6d7d7d960c6394e83220_NeikiAnalytics

    • Size

      187KB

    • MD5

      5cd7a2998c4b6d7d7d960c6394e83220

    • SHA1

      5d257ffd5b4c717537a21eebbb2e592452857442

    • SHA256

      578ff807510ddc744da2d0e6b56c43d3c29a97502a06ef4bbb6a6395db0498c3

    • SHA512

      042bc4ac0e9ce83a43678bafa953b8810c5baa25af538b8460d547b44ae508d6cfda6af118217a002afa80f176cb1598f76612f0168ecb0d8a47ed8c7fb2a0f7

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgE8rWpcOPxPke+e3fFpsJOfFpsJbgESr9:tFPxPke+eILFPxPke+eIO

    Score
    9/10
    ransomware

    • Renames multiple (3871) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks