Overview

overview

9

Static

static

3

14938d0466...cs.exe

windows7-x64

9

14938d0466...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    14938d04665b7db4a1e2808234c605f0_NeikiAnalytics

  • Size

    159KB

  • Sample

    240515-w9m63sed29

  • MD5

    14938d04665b7db4a1e2808234c605f0

  • SHA1

    700aa53c660b0d7c8ad58b5f1b27f9880ca63cb1

  • SHA256

    d9d723bc70cea396d4860250fe831de3f6fd61ea1bb1756a53ba79bb516aa06c

  • SHA512

    4910f9382d12e6e64bf650bba552ed94d06370a32a37749ac034aa17fc5ec4e4d0e15cae38563b0ba23889d0b8a0c0ecd7038d1a866265457757d02a85422924

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZZyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q:RqKvb0CYJ973e+eKZwqKvb0CYJ973e+J

Score
9/10
ransomware

Malware Config

Targets

    • Target

      14938d04665b7db4a1e2808234c605f0_NeikiAnalytics

    • Size

      159KB

    • MD5

      14938d04665b7db4a1e2808234c605f0

    • SHA1

      700aa53c660b0d7c8ad58b5f1b27f9880ca63cb1

    • SHA256

      d9d723bc70cea396d4860250fe831de3f6fd61ea1bb1756a53ba79bb516aa06c

    • SHA512

      4910f9382d12e6e64bf650bba552ed94d06370a32a37749ac034aa17fc5ec4e4d0e15cae38563b0ba23889d0b8a0c0ecd7038d1a866265457757d02a85422924

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZZyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q:RqKvb0CYJ973e+eKZwqKvb0CYJ973e+J

    Score
    9/10
    ransomware

    • Renames multiple (3800) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks