Overview

overview

9

Static

static

7

0d680d8e96...cs.exe

windows7-x64

9

0d680d8e96...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d680d8e96b4c46331ca55d155d531d31ad825d0c80dfa8dc15c460d19532689_NeikiAnalytics

  • Size

    72KB

  • Sample

    240521-gx9rzsaf82

  • MD5

    11967021febc49680040101333743472

  • SHA1

    65e66efc6dab409ec7d6b247346c36d2aefc7b61

  • SHA256

    0d680d8e96b4c46331ca55d155d531d31ad825d0c80dfa8dc15c460d19532689

  • SHA512

    0e501597a42c517d48d07b47d0042764c5f09f16f1ef5618c28a33fbe8d1c5dc0a4e875e5a2d8a528e38052929c6debf757faab6308bce96266754f6bdc351b3

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJ3:+nyiQSoB

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      0d680d8e96b4c46331ca55d155d531d31ad825d0c80dfa8dc15c460d19532689_NeikiAnalytics

    • Size

      72KB

    • MD5

      11967021febc49680040101333743472

    • SHA1

      65e66efc6dab409ec7d6b247346c36d2aefc7b61

    • SHA256

      0d680d8e96b4c46331ca55d155d531d31ad825d0c80dfa8dc15c460d19532689

    • SHA512

      0e501597a42c517d48d07b47d0042764c5f09f16f1ef5618c28a33fbe8d1c5dc0a4e875e5a2d8a528e38052929c6debf757faab6308bce96266754f6bdc351b3

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJ3:+nyiQSoB

    Score
    9/10
    ransomwareupx

    • Renames multiple (3451) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks