Overview

overview

9

Static

static

7

49f8da82b4...cs.exe

windows7-x64

9

49f8da82b4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49f8da82b4ffd62131e04f27bfd503f0_NeikiAnalytics.exe

  • Size

    113KB

  • Sample

    240519-18va8adc89

  • MD5

    49f8da82b4ffd62131e04f27bfd503f0

  • SHA1

    b55802e6f1123440eae10ffabfce6e8f8001a6b5

  • SHA256

    2f629d061cd8244c024dd0921fe701e6e9c27a9303b4cc8ac5efb080ed833224

  • SHA512

    0fe80c0e5e56975bf02837148e4f13b72f775871aa04cd1a17075840557669d6afb1e4b1f58a64b2cda473547a4dc2f95e15e031326e2e6b97dda6466aa5b99b

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsNTWn1++PJHJXA/OsIZfzc3/Q8asZ:+nyiQSohsUspQSohsUsl

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      49f8da82b4ffd62131e04f27bfd503f0_NeikiAnalytics.exe

    • Size

      113KB

    • MD5

      49f8da82b4ffd62131e04f27bfd503f0

    • SHA1

      b55802e6f1123440eae10ffabfce6e8f8001a6b5

    • SHA256

      2f629d061cd8244c024dd0921fe701e6e9c27a9303b4cc8ac5efb080ed833224

    • SHA512

      0fe80c0e5e56975bf02837148e4f13b72f775871aa04cd1a17075840557669d6afb1e4b1f58a64b2cda473547a4dc2f95e15e031326e2e6b97dda6466aa5b99b

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsNTWn1++PJHJXA/OsIZfzc3/Q8asZ:+nyiQSohsUspQSohsUsl

    Score
    9/10
    ransomwareupx

    • Renames multiple (3436) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks