Overview

overview

9

Static

static

7

11a9ac44bc...cs.exe

windows7-x64

9

11a9ac44bc...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    11a9ac44bc6ef6b3c78cb9867d3c95e0_NeikiAnalytics.exe

  • Size

    135KB

  • Sample

    240517-wfac5abc5y

  • MD5

    11a9ac44bc6ef6b3c78cb9867d3c95e0

  • SHA1

    d1080562f1658312b2ffe851a56113513c8c2aca

  • SHA256

    04f308ab2cf06bf6d0b26afbb85b396b77e11da264c8757c3b4da07bdbc905a9

  • SHA512

    5d5d9491e6759b1149580907147c13c2423101bdffa42fb0ab7a26d4b2cf7b3dee184bc9436d1ea06352105fdc03adc8b878a6ec80db0ebf8b5fed9df1e46f3e

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCv:+nymCAIuZAIuYSMjoqtMHfhf5Ssk/6e

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      11a9ac44bc6ef6b3c78cb9867d3c95e0_NeikiAnalytics.exe

    • Size

      135KB

    • MD5

      11a9ac44bc6ef6b3c78cb9867d3c95e0

    • SHA1

      d1080562f1658312b2ffe851a56113513c8c2aca

    • SHA256

      04f308ab2cf06bf6d0b26afbb85b396b77e11da264c8757c3b4da07bdbc905a9

    • SHA512

      5d5d9491e6759b1149580907147c13c2423101bdffa42fb0ab7a26d4b2cf7b3dee184bc9436d1ea06352105fdc03adc8b878a6ec80db0ebf8b5fed9df1e46f3e

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCv:+nymCAIuZAIuYSMjoqtMHfhf5Ssk/6e

    Score
    9/10
    ransomwareupx

    • Renames multiple (506) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks