Overview

overview

9

Static

static

7

ec9fb51a3a...cs.exe

windows7-x64

9

ec9fb51a3a...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec9fb51a3ae81a581cb56038780cee60_NeikiAnalytics.exe

  • Size

    127KB

  • Sample

    240517-ptsnashd9w

  • MD5

    ec9fb51a3ae81a581cb56038780cee60

  • SHA1

    8b32777f2021ee2acff13e7e3b5b2f1d165c2a83

  • SHA256

    7b0ba317679d54572178e752988352c1bc74b895aeeeb5592ded5201c54651bf

  • SHA512

    c9aa9c36866daedda8bd91b289963410a53c2d54d72fc722abe705860fcb65ed2a4bf0cb3763d01d69e760184f4fdb72beb8c4a6569ba8f47bf625c68355f939

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSC7:+nymCAIuZAIuYSMjoqtMHfhfu

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      ec9fb51a3ae81a581cb56038780cee60_NeikiAnalytics.exe

    • Size

      127KB

    • MD5

      ec9fb51a3ae81a581cb56038780cee60

    • SHA1

      8b32777f2021ee2acff13e7e3b5b2f1d165c2a83

    • SHA256

      7b0ba317679d54572178e752988352c1bc74b895aeeeb5592ded5201c54651bf

    • SHA512

      c9aa9c36866daedda8bd91b289963410a53c2d54d72fc722abe705860fcb65ed2a4bf0cb3763d01d69e760184f4fdb72beb8c4a6569ba8f47bf625c68355f939

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSC7:+nymCAIuZAIuYSMjoqtMHfhfu

    Score
    9/10
    ransomwareupx

    • Renames multiple (3425) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks