Overview

overview

9

Static

static

3

43bc3ea363...cs.exe

windows7-x64

9

43bc3ea363...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43bc3ea3636424e4dce4f6518194cc10_NeikiAnalytics

  • Size

    89KB

  • Sample

    240515-15kydafa33

  • MD5

    43bc3ea3636424e4dce4f6518194cc10

  • SHA1

    42955d598ce9e90d1a0b4f8016e1e354fa0e0614

  • SHA256

    9547659a38c4fd7fb80075157fe8654b8afc5bc85bca24937b0cebb90de07980

  • SHA512

    2a30a103255e907019ec794dcd3ab857bf387c5ffd1ef2f82f2b344d5daddde26376799aaa614653851c4627421615c38629f12270efc49c7613c1e8c6fb886e

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKP76N:6rWpcOPxPke+e3fFpsJOfFpsJbgE0

Score
9/10
ransomware

Malware Config

Targets

    • Target

      43bc3ea3636424e4dce4f6518194cc10_NeikiAnalytics

    • Size

      89KB

    • MD5

      43bc3ea3636424e4dce4f6518194cc10

    • SHA1

      42955d598ce9e90d1a0b4f8016e1e354fa0e0614

    • SHA256

      9547659a38c4fd7fb80075157fe8654b8afc5bc85bca24937b0cebb90de07980

    • SHA512

      2a30a103255e907019ec794dcd3ab857bf387c5ffd1ef2f82f2b344d5daddde26376799aaa614653851c4627421615c38629f12270efc49c7613c1e8c6fb886e

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKP76N:6rWpcOPxPke+e3fFpsJOfFpsJbgE0

    Score
    9/10
    ransomware

    • Renames multiple (3443) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks