Overview

overview

9

Static

static

7

b83a0878b7...cs.exe

windows7-x64

9

b83a0878b7...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b83a0878b763616b37eaf01ecf94b190_NeikiAnalytics

  • Size

    132KB

  • Sample

    240516-hwcljahb8v

  • MD5

    b83a0878b763616b37eaf01ecf94b190

  • SHA1

    9cc8f07997a27375f0a153c87b5788481ba1ee87

  • SHA256

    86a91f5d03ee17790a070774208834ef940bf68ee4c392e0457e0f652e22a669

  • SHA512

    e85174a8069562f6ac3bbff684695c73d251b0ab580a7ed48f627e8941e12e6c5c4eadf5bb91a0a9660af627d704249a214eddfa1843fd002ab08ba6952a8386

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCq:+nymCAIuZAIuYSMjoqtMHfhf5Si

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      b83a0878b763616b37eaf01ecf94b190_NeikiAnalytics

    • Size

      132KB

    • MD5

      b83a0878b763616b37eaf01ecf94b190

    • SHA1

      9cc8f07997a27375f0a153c87b5788481ba1ee87

    • SHA256

      86a91f5d03ee17790a070774208834ef940bf68ee4c392e0457e0f652e22a669

    • SHA512

      e85174a8069562f6ac3bbff684695c73d251b0ab580a7ed48f627e8941e12e6c5c4eadf5bb91a0a9660af627d704249a214eddfa1843fd002ab08ba6952a8386

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCq:+nymCAIuZAIuYSMjoqtMHfhf5Si

    Score
    9/10
    ransomwareupx

    • Renames multiple (519) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks