Overview

overview

9

Static

static

7

41d2c387f4...cs.exe

windows7-x64

9

41d2c387f4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41d2c387f470e6406be9bcde57772610_NeikiAnalytics.exe

  • Size

    219KB

  • Sample

    240522-1gkbyahf6t

  • MD5

    41d2c387f470e6406be9bcde57772610

  • SHA1

    a6ba31e69cb629d68ab7dd408dae7b06b6787747

  • SHA256

    5b5b3fb978809d16969dea2a09186f085405b049792348f5b8af3b3d8cd67330

  • SHA512

    8bdba481f05b4b55541f4730b050faf6fb064c780c281e562a15064c987f32337e82f8069782d6b4e8a85ea7fd2f9ca86194c7c3897a211b837fb499310ef6ff

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhf9fAIuZAIuYSMjoqtMHfhf+:JmCAIuZAIuDMVtM/LfAIuZAIuDMVtM/4

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      41d2c387f470e6406be9bcde57772610_NeikiAnalytics.exe

    • Size

      219KB

    • MD5

      41d2c387f470e6406be9bcde57772610

    • SHA1

      a6ba31e69cb629d68ab7dd408dae7b06b6787747

    • SHA256

      5b5b3fb978809d16969dea2a09186f085405b049792348f5b8af3b3d8cd67330

    • SHA512

      8bdba481f05b4b55541f4730b050faf6fb064c780c281e562a15064c987f32337e82f8069782d6b4e8a85ea7fd2f9ca86194c7c3897a211b837fb499310ef6ff

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhf9fAIuZAIuYSMjoqtMHfhf+:JmCAIuZAIuDMVtM/LfAIuZAIuDMVtM/4

    Score
    9/10
    ransomwareupx

    • Renames multiple (335) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks