Overview

overview

9

Static

static

7

2a1d0f147c...cs.exe

windows7-x64

9

2a1d0f147c...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a1d0f147c88bf3f90b13502bcd82f20_NeikiAnalytics

  • Size

    149KB

  • Sample

    240514-z6nvzsha2y

  • MD5

    2a1d0f147c88bf3f90b13502bcd82f20

  • SHA1

    6dfd92a16aee24ecd3d89c33523d5af9e9af095d

  • SHA256

    cae4fc680b21d4752bf0463c2b23c4624798fa66d222784f7581f1d64a3e821a

  • SHA512

    bb8d43c0b2fb2df7244b43ff2220c8ac020a8459faaade5397493c21c8eb429b1524ccc5c7d86bcb9273dfa97db87cef7e2d531bd6f9045787acd66112d0b44a

  • SSDEEP

    3072:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuZno6k:KQSo1EZGtKgZGtK/CAIuZAIug

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      2a1d0f147c88bf3f90b13502bcd82f20_NeikiAnalytics

    • Size

      149KB

    • MD5

      2a1d0f147c88bf3f90b13502bcd82f20

    • SHA1

      6dfd92a16aee24ecd3d89c33523d5af9e9af095d

    • SHA256

      cae4fc680b21d4752bf0463c2b23c4624798fa66d222784f7581f1d64a3e821a

    • SHA512

      bb8d43c0b2fb2df7244b43ff2220c8ac020a8459faaade5397493c21c8eb429b1524ccc5c7d86bcb9273dfa97db87cef7e2d531bd6f9045787acd66112d0b44a

    • SSDEEP

      3072:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuZno6k:KQSo1EZGtKgZGtK/CAIuZAIug

    Score
    9/10
    ransomwareupx

    • Renames multiple (3444) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks