Overview

overview

9

Static

static

3

42b29ffcbe...cs.exe

windows7-x64

9

42b29ffcbe...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42b29ffcbe055386c10b846e95e6d310_NeikiAnalytics.exe

  • Size

    166KB

  • Sample

    240522-1j3lashg6v

  • MD5

    42b29ffcbe055386c10b846e95e6d310

  • SHA1

    685a095ea483982b817885fe8ca48ebfd5d9c9a7

  • SHA256

    f01c390ad64f9a8df65a640641571429bee99f9b8d2c5d0662c500a87e608a36

  • SHA512

    7b903fb72c25a18cdb30299841c710b44af3ea591778cdc793eace0d43182efb378e10a2895caf12fb11a1cf4df9ed2d939f0a612bc1e7d89730d661e89b450e

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBr:PqFF2Ie+e1qLaqFF2Ie+e1qLn

Score
9/10
ransomware

Malware Config

Targets

    • Target

      42b29ffcbe055386c10b846e95e6d310_NeikiAnalytics.exe

    • Size

      166KB

    • MD5

      42b29ffcbe055386c10b846e95e6d310

    • SHA1

      685a095ea483982b817885fe8ca48ebfd5d9c9a7

    • SHA256

      f01c390ad64f9a8df65a640641571429bee99f9b8d2c5d0662c500a87e608a36

    • SHA512

      7b903fb72c25a18cdb30299841c710b44af3ea591778cdc793eace0d43182efb378e10a2895caf12fb11a1cf4df9ed2d939f0a612bc1e7d89730d661e89b450e

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBr:PqFF2Ie+e1qLaqFF2Ie+e1qLn

    Score
    9/10
    ransomware

    • Renames multiple (5123) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks