Overview

overview

9

Static

static

3

75fcc33553...cs.exe

windows7-x64

9

75fcc33553...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75fcc33553d2ba2dc1bce2b7e0aede70_NeikiAnalytics

  • Size

    160KB

  • Sample

    240516-b67fbsfb57

  • MD5

    75fcc33553d2ba2dc1bce2b7e0aede70

  • SHA1

    2f9fe634db2ba4fb772f27c011c752c956b20962

  • SHA256

    32bb4f969ef0eb85ad1d2576149bd941eeb5b04cedcfe6c7071b836ff2418e7d

  • SHA512

    e455813244ff3d644d43832ede7de0990faff5882ea8bb589e8052e28b740197025f2bf606f658b8894b854837405447de83105fa44a24d8ed7c21e3927e1dce

  • SSDEEP

    1536:W7ZDpApYbWjnWf05PG0PG26f0J0K7ZDpApYbWjnWf05PG0PG26f0J0U:6DWpDWYPxPMCLDWpDWYPxPMCt

Score
9/10
ransomware

Malware Config

Targets

    • Target

      75fcc33553d2ba2dc1bce2b7e0aede70_NeikiAnalytics

    • Size

      160KB

    • MD5

      75fcc33553d2ba2dc1bce2b7e0aede70

    • SHA1

      2f9fe634db2ba4fb772f27c011c752c956b20962

    • SHA256

      32bb4f969ef0eb85ad1d2576149bd941eeb5b04cedcfe6c7071b836ff2418e7d

    • SHA512

      e455813244ff3d644d43832ede7de0990faff5882ea8bb589e8052e28b740197025f2bf606f658b8894b854837405447de83105fa44a24d8ed7c21e3927e1dce

    • SSDEEP

      1536:W7ZDpApYbWjnWf05PG0PG26f0J0K7ZDpApYbWjnWf05PG0PG26f0J0U:6DWpDWYPxPMCLDWpDWYPxPMCt

    Score
    9/10
    ransomware

    • Renames multiple (4976) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks