Overview

overview

9

Static

static

3

60f7fa3872...cs.exe

windows7-x64

9

60f7fa3872...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60f7fa38725dc1e509d47be10c305230_NeikiAnalytics

  • Size

    185KB

  • Sample

    240515-ch7lvscf66

  • MD5

    60f7fa38725dc1e509d47be10c305230

  • SHA1

    38dbb6ee69caae296c792a98b3cc3b5b175d650f

  • SHA256

    a6ba74d243de69d6dd796a01f96a8b5fdf6da72279d8703484bbc5bfda57be08

  • SHA512

    6cbcf0dd194eddef5b06e462439d7414594ca62aa1046899dfdca76f29728cb025cb897ac9a134d992b78d58d7bf50bd754aa7e1f828b42b1377f74377167e2e

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgESrWpcOPxPke+e3fFpsJOfFpsJbgEl:tFPxPke+eI1FPxPke+eIl

Score
9/10
ransomware

Malware Config

Targets

    • Target

      60f7fa38725dc1e509d47be10c305230_NeikiAnalytics

    • Size

      185KB

    • MD5

      60f7fa38725dc1e509d47be10c305230

    • SHA1

      38dbb6ee69caae296c792a98b3cc3b5b175d650f

    • SHA256

      a6ba74d243de69d6dd796a01f96a8b5fdf6da72279d8703484bbc5bfda57be08

    • SHA512

      6cbcf0dd194eddef5b06e462439d7414594ca62aa1046899dfdca76f29728cb025cb897ac9a134d992b78d58d7bf50bd754aa7e1f828b42b1377f74377167e2e

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgESrWpcOPxPke+e3fFpsJOfFpsJbgEl:tFPxPke+eI1FPxPke+eIl

    Score
    9/10
    ransomware

    • Renames multiple (3861) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks