Overview

overview

9

Static

static

3

edb5a7724b...cs.exe

windows7-x64

7

edb5a7724b...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    edb5a7724b86d9189d5c6f1de58c0990_NeikiAnalytics.exe

  • Size

    403KB

  • Sample

    240517-spmg9sdf3z

  • MD5

    edb5a7724b86d9189d5c6f1de58c0990

  • SHA1

    693e7225f542ab2e9960c605549352f10df4b524

  • SHA256

    ad5ab131073a9abde0f2133d3d3a73b8cfd236f8bf42f2b616b9eb676fe5efe8

  • SHA512

    7d7824c9cdb869a62c69eff0336c37cb93837cbc9f436850ee6fd861735db6c7f588f0fbb9a8111110cfe518ba341eda46e786a419ce5216823b5f70e2ed104f

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZ6gXFTlAOB6pcq+HpFeHPgsHsSYafq8g2OA:vvbxYX7Z6gTAzpcqapMvgzS/J1

Score
9/10
ransomware

Malware Config

Targets

    • Target

      edb5a7724b86d9189d5c6f1de58c0990_NeikiAnalytics.exe

    • Size

      403KB

    • MD5

      edb5a7724b86d9189d5c6f1de58c0990

    • SHA1

      693e7225f542ab2e9960c605549352f10df4b524

    • SHA256

      ad5ab131073a9abde0f2133d3d3a73b8cfd236f8bf42f2b616b9eb676fe5efe8

    • SHA512

      7d7824c9cdb869a62c69eff0336c37cb93837cbc9f436850ee6fd861735db6c7f588f0fbb9a8111110cfe518ba341eda46e786a419ce5216823b5f70e2ed104f

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZ6gXFTlAOB6pcq+HpFeHPgsHsSYafq8g2OA:vvbxYX7Z6gTAzpcqapMvgzS/J1

    Score
    9/10
    ransomware

    • Renames multiple (4842) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks