Overview

overview

9

Static

static

7

e5a736701c...cs.exe

windows7-x64

9

e5a736701c...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e5a736701c187bd60f11cdcc28ad07d0_NeikiAnalytics

  • Size

    213KB

  • Sample

    240516-vbprksea2w

  • MD5

    e5a736701c187bd60f11cdcc28ad07d0

  • SHA1

    4eff5f28eb87fa7f7019880eda2adf5736b62aea

  • SHA256

    ac755d0f8f3393aff23b76d7f2048237e288f3952cbbc4704102d41833490856

  • SHA512

    668732d11e53c06be4dd4fb516eeef3f56b091c0755cc9f7391c0b848021bfe86c29bff162570ea0c0c3110cb0b7130ca2c64275101d578acf3dfd555e34d26c

  • SSDEEP

    3072:hfAIuZAIuYSMjoqtMHfhfZfAIuZAIuYSMjoqtMHfhfA:hfAIuZAIuDMVtM/jfAIuZAIuDMVtM/S

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      e5a736701c187bd60f11cdcc28ad07d0_NeikiAnalytics

    • Size

      213KB

    • MD5

      e5a736701c187bd60f11cdcc28ad07d0

    • SHA1

      4eff5f28eb87fa7f7019880eda2adf5736b62aea

    • SHA256

      ac755d0f8f3393aff23b76d7f2048237e288f3952cbbc4704102d41833490856

    • SHA512

      668732d11e53c06be4dd4fb516eeef3f56b091c0755cc9f7391c0b848021bfe86c29bff162570ea0c0c3110cb0b7130ca2c64275101d578acf3dfd555e34d26c

    • SSDEEP

      3072:hfAIuZAIuYSMjoqtMHfhfZfAIuZAIuYSMjoqtMHfhfA:hfAIuZAIuDMVtM/jfAIuZAIuDMVtM/S

    Score
    9/10
    ransomwareupx

    • Renames multiple (4504) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks