Overview

overview

9

Static

static

7

76938068d5...cs.exe

windows7-x64

9

76938068d5...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    76938068d50cd628b05e63e869bc6d40_NeikiAnalytics

  • Size

    546KB

  • Sample

    240516-b8h6hsfc39

  • MD5

    76938068d50cd628b05e63e869bc6d40

  • SHA1

    fb0ae8935105bd5d822b87a3fa095c019752e019

  • SHA256

    0e074af9335c4b089f8fb1a931c79316fa278275dfe453a94820eed0ef6f8a99

  • SHA512

    9bccda28e2791e0bb3f6219d963b510cb49bc767a093360e9f4f59fccd2de5433e7797995eff82ce68b751c0b5a8fb0b3a916958aba744e02432106be3f985ea

  • SSDEEP

    12288:ZAIuZAIuO50md3/94A2p8GnqZycIr+VtKEvFWOC3aEX9F:m5x/WnSyhbEv8O0D

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      76938068d50cd628b05e63e869bc6d40_NeikiAnalytics

    • Size

      546KB

    • MD5

      76938068d50cd628b05e63e869bc6d40

    • SHA1

      fb0ae8935105bd5d822b87a3fa095c019752e019

    • SHA256

      0e074af9335c4b089f8fb1a931c79316fa278275dfe453a94820eed0ef6f8a99

    • SHA512

      9bccda28e2791e0bb3f6219d963b510cb49bc767a093360e9f4f59fccd2de5433e7797995eff82ce68b751c0b5a8fb0b3a916958aba744e02432106be3f985ea

    • SSDEEP

      12288:ZAIuZAIuO50md3/94A2p8GnqZycIr+VtKEvFWOC3aEX9F:m5x/WnSyhbEv8O0D

    Score
    9/10
    ransomwareupx

    • Renames multiple (3441) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks