Overview

overview

9

Static

static

3

d0b2faf397...cs.exe

windows7-x64

9

d0b2faf397...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0b2faf3970ad39429cb88c20a6e0680_NeikiAnalytics.exe

  • Size

    99KB

  • Sample

    240517-jez6yafg4w

  • MD5

    d0b2faf3970ad39429cb88c20a6e0680

  • SHA1

    1a30dfbb1e6bbaa31eed1492d1ba144faa176be0

  • SHA256

    f299d04335643d3bbce66db238edc0b43b25be6a7424386a7e022dca514cc558

  • SHA512

    099607cd2c9273e6a735973acb45c9ad7f5c47dc844875d949e8387fda70d3ae52ec2df5c4998cc43303a16fb1e09b6a1250b56f9c29cabf8f69fd4adfe04e02

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOfFpsJOfFpsJagd:RqKvb0CYJ973e+eKZ6gd

Score
9/10
ransomware

Malware Config

Targets

    • Target

      d0b2faf3970ad39429cb88c20a6e0680_NeikiAnalytics.exe

    • Size

      99KB

    • MD5

      d0b2faf3970ad39429cb88c20a6e0680

    • SHA1

      1a30dfbb1e6bbaa31eed1492d1ba144faa176be0

    • SHA256

      f299d04335643d3bbce66db238edc0b43b25be6a7424386a7e022dca514cc558

    • SHA512

      099607cd2c9273e6a735973acb45c9ad7f5c47dc844875d949e8387fda70d3ae52ec2df5c4998cc43303a16fb1e09b6a1250b56f9c29cabf8f69fd4adfe04e02

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOfFpsJOfFpsJagd:RqKvb0CYJ973e+eKZ6gd

    Score
    9/10
    ransomware

    • Renames multiple (3196) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks