Overview

overview

9

Static

static

3

ec12aa7293...cs.exe

windows7-x64

9

ec12aa7293...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec12aa72934c5857dd1fbd84cb060520_NeikiAnalytics.exe

  • Size

    70KB

  • Sample

    240517-pg53vsha96

  • MD5

    ec12aa72934c5857dd1fbd84cb060520

  • SHA1

    30f72d6f5be2531bb30602488c857032f5568c01

  • SHA256

    416fe08620bc7c4ea535e891049a3b0557ff6160d76d3e88003afcf77e272678

  • SHA512

    00b523ab401843513358bb8735159dbfa970a2677cee806e5ad028e1ac307b9d22b54cf8dfa7c9afb32b1e7ac06a87e7a3ae938405a88b44313f9a35a5f9a61a

  • SSDEEP

    1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t/:6e7WpP9oVLQthbYY9oVLQthbUrt7t/

Score
9/10
ransomware

Malware Config

Targets

    • Target

      ec12aa72934c5857dd1fbd84cb060520_NeikiAnalytics.exe

    • Size

      70KB

    • MD5

      ec12aa72934c5857dd1fbd84cb060520

    • SHA1

      30f72d6f5be2531bb30602488c857032f5568c01

    • SHA256

      416fe08620bc7c4ea535e891049a3b0557ff6160d76d3e88003afcf77e272678

    • SHA512

      00b523ab401843513358bb8735159dbfa970a2677cee806e5ad028e1ac307b9d22b54cf8dfa7c9afb32b1e7ac06a87e7a3ae938405a88b44313f9a35a5f9a61a

    • SSDEEP

      1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t/:6e7WpP9oVLQthbYY9oVLQthbUrt7t/

    Score
    9/10
    ransomware

    • Renames multiple (3504) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks