Overview

overview

9

Static

static

3

c7314d9331...cs.exe

windows7-x64

9

c7314d9331...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    c7314d933115336fa4a0ac86f5da24e0_NeikiAnalytics

  • Size

    246KB

  • Sample

    240514-p3d69sfh8w

  • MD5

    c7314d933115336fa4a0ac86f5da24e0

  • SHA1

    83672d20c508df70273a0d280fc9959708c9b305

  • SHA256

    c8c97eac826c09e2459a19375f9e8aa330509c7f83a652eb07241802ab8d7bca

  • SHA512

    368d469a9afbb514c72e38ed50d25f7dcc7a7b2b3b3cc740b201790b4e8983e90371bda6b70b28742a5cbca6c1348f7d19ba90c945ea79c4484c829335af6426

  • SSDEEP

    3072:6QWpkzlfFpsJOfFpsJ+n6jCQWpkzlfFpsJOfFpsJ+n6jq:WYw

Score
9/10
ransomware

Malware Config

Targets

    • Target

      c7314d933115336fa4a0ac86f5da24e0_NeikiAnalytics

    • Size

      246KB

    • MD5

      c7314d933115336fa4a0ac86f5da24e0

    • SHA1

      83672d20c508df70273a0d280fc9959708c9b305

    • SHA256

      c8c97eac826c09e2459a19375f9e8aa330509c7f83a652eb07241802ab8d7bca

    • SHA512

      368d469a9afbb514c72e38ed50d25f7dcc7a7b2b3b3cc740b201790b4e8983e90371bda6b70b28742a5cbca6c1348f7d19ba90c945ea79c4484c829335af6426

    • SSDEEP

      3072:6QWpkzlfFpsJOfFpsJ+n6jCQWpkzlfFpsJOfFpsJ+n6jq:WYw

    Score
    9/10
    ransomware

    • Renames multiple (3362) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks