Overview

overview

9

Static

static

3

993be447de...cs.exe

windows7-x64

9

993be447de...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    993be447de91493de6438970814c9400_NeikiAnalytics

  • Size

    3.8MB

  • Sample

    240515-he1a9sdf87

  • MD5

    993be447de91493de6438970814c9400

  • SHA1

    e1ef9d4034308d5d5551c16e493708a44b78acc3

  • SHA256

    f9ec5b807eed13641eda81591f5ea4f95996093f6343869f1444baef00e22cb4

  • SHA512

    f1d3500ec27246e3a9416522caaf336ee46cfaeb1817a26061e1526e57be8a5e037187ff62f055bb8f75abd2797cfd2013d30d200a3ee2943a1651f5a08af2ef

  • SSDEEP

    49152:3PxPlHcdXRyGWrP/OiFoNFRa6uahv3nmjTNYuUn89KOArxm7Kb6KvySgYnevXr:3PxP5YRfvhv30RYI9urj6KvySznej

Score
9/10
ransomware

Malware Config

Targets

    • Target

      993be447de91493de6438970814c9400_NeikiAnalytics

    • Size

      3.8MB

    • MD5

      993be447de91493de6438970814c9400

    • SHA1

      e1ef9d4034308d5d5551c16e493708a44b78acc3

    • SHA256

      f9ec5b807eed13641eda81591f5ea4f95996093f6343869f1444baef00e22cb4

    • SHA512

      f1d3500ec27246e3a9416522caaf336ee46cfaeb1817a26061e1526e57be8a5e037187ff62f055bb8f75abd2797cfd2013d30d200a3ee2943a1651f5a08af2ef

    • SSDEEP

      49152:3PxPlHcdXRyGWrP/OiFoNFRa6uahv3nmjTNYuUn89KOArxm7Kb6KvySgYnevXr:3PxP5YRfvhv30RYI9urj6KvySznej

    Score
    9/10
    ransomware

    • Renames multiple (3677) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks