Overview

overview

9

Static

static

3

6c2ee2a7b7...cs.exe

windows7-x64

9

6c2ee2a7b7...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c2ee2a7b7fb291e27c0fbfd18dd22b0_NeikiAnalytics

  • Size

    234KB

  • Sample

    240514-d8b4bahd4x

  • MD5

    6c2ee2a7b7fb291e27c0fbfd18dd22b0

  • SHA1

    60fe1f45a803da4c127ba63ba92719bf6f6090f7

  • SHA256

    dbfc8b7e6760b6c4b275c22456d2c5da985764e2de8bdc579826307d7a486357

  • SHA512

    9fcca230ddf8ef1a826da10bcfc5053e679c37dda77e877cbef5d89ecfa56e703f8116047677fc47c71f1480dad278cbc05ab468a02c44be554cd87a9e127f85

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEIixihyKoIWbsHfySkT5GeCyi348oWGRPOzk1:tFPxPke+eIsFPxPke+eIT

Score
9/10
ransomware

Malware Config

Targets

    • Target

      6c2ee2a7b7fb291e27c0fbfd18dd22b0_NeikiAnalytics

    • Size

      234KB

    • MD5

      6c2ee2a7b7fb291e27c0fbfd18dd22b0

    • SHA1

      60fe1f45a803da4c127ba63ba92719bf6f6090f7

    • SHA256

      dbfc8b7e6760b6c4b275c22456d2c5da985764e2de8bdc579826307d7a486357

    • SHA512

      9fcca230ddf8ef1a826da10bcfc5053e679c37dda77e877cbef5d89ecfa56e703f8116047677fc47c71f1480dad278cbc05ab468a02c44be554cd87a9e127f85

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEIixihyKoIWbsHfySkT5GeCyi348oWGRPOzk1:tFPxPke+eIsFPxPke+eIT

    Score
    9/10
    ransomware

    • Renames multiple (4444) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks