Overview

overview

9

Static

static

7

7affd470cb...cs.exe

windows7-x64

9

7affd470cb...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7affd470cb6b737e9eca2b46ecfc64f0_NeikiAnalytics.exe

  • Size

    234KB

  • Sample

    240517-bzcx5sbb7s

  • MD5

    7affd470cb6b737e9eca2b46ecfc64f0

  • SHA1

    11d959c3840ceb8e799323849ac9b07dea8866e4

  • SHA256

    bd44f5a3afc7116bea6128e03afecc0f8f5b1f7e9216d8deed8cba9e9d8c0a3b

  • SHA512

    2e1787f12754b50e22e6abd7dbf92e752c2ba3ab74528640611710d4c52cde94c0a9d9cae2dc558d5cb3d83dae40102b78c5101b13aaf88d62fde957999aa6c7

  • SSDEEP

    3072:fnymCAIuZAIuYSMjoqtMHfhfDfAIuZAIuYSMjoqtMHfhfx:KmCAIuZAIuDMVtM/lfAIuZAIuDMVtM/3

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      7affd470cb6b737e9eca2b46ecfc64f0_NeikiAnalytics.exe

    • Size

      234KB

    • MD5

      7affd470cb6b737e9eca2b46ecfc64f0

    • SHA1

      11d959c3840ceb8e799323849ac9b07dea8866e4

    • SHA256

      bd44f5a3afc7116bea6128e03afecc0f8f5b1f7e9216d8deed8cba9e9d8c0a3b

    • SHA512

      2e1787f12754b50e22e6abd7dbf92e752c2ba3ab74528640611710d4c52cde94c0a9d9cae2dc558d5cb3d83dae40102b78c5101b13aaf88d62fde957999aa6c7

    • SSDEEP

      3072:fnymCAIuZAIuYSMjoqtMHfhfDfAIuZAIuYSMjoqtMHfhfx:KmCAIuZAIuDMVtM/lfAIuZAIuDMVtM/3

    Score
    9/10
    ransomwareupx

    • Renames multiple (2992) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks