Overview

overview

9

Static

static

7

4fded52393...cs.exe

windows7-x64

9

4fded52393...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4fded5239363b119a9a65348573ca630_NeikiAnalytics.exe

  • Size

    74KB

  • Sample

    240522-2qdfesbh41

  • MD5

    4fded5239363b119a9a65348573ca630

  • SHA1

    c44eace8f4431dd1574377f745f86194d42541cf

  • SHA256

    0e6bc29b814021e40b06c16b703ba8852e677f6e529ab81f27c1309d6ec29b65

  • SHA512

    8211e9d376d3aee9c7392ccc6e456ddb4faaf8b5b21762505b96ea15df13891d93cfa4032dd5fd7830d121c0dd22de5503ace01478a1d801c0f241ed7e51ee7b

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8yil:fnyiQSo0

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      4fded5239363b119a9a65348573ca630_NeikiAnalytics.exe

    • Size

      74KB

    • MD5

      4fded5239363b119a9a65348573ca630

    • SHA1

      c44eace8f4431dd1574377f745f86194d42541cf

    • SHA256

      0e6bc29b814021e40b06c16b703ba8852e677f6e529ab81f27c1309d6ec29b65

    • SHA512

      8211e9d376d3aee9c7392ccc6e456ddb4faaf8b5b21762505b96ea15df13891d93cfa4032dd5fd7830d121c0dd22de5503ace01478a1d801c0f241ed7e51ee7b

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8yil:fnyiQSo0

    Score
    9/10
    ransomwareupx

    • Renames multiple (3431) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks