Overview

overview

9

Static

static

7

959668a67f...cs.exe

windows7-x64

9

959668a67f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    959668a67fdd854b56b7386facc28090_NeikiAnalytics.exe

  • Size

    137KB

  • Sample

    240522-y15qwafb56

  • MD5

    959668a67fdd854b56b7386facc28090

  • SHA1

    02c969c64e9e20711bb00b53a34995f5fa7c4524

  • SHA256

    d9ce548ccee86f992574905fcb869b10ab853f3fb1e4e0ce24b71d0f65193339

  • SHA512

    25838caaa0466346084094402858be59ae69da31ff9aad5c036f01cacd158e8b53c4e3a28664675dd774b472a8fddb4ea8ede138685cb158fc419bb0251072e5

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8yi61:fnyiQSo/

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      959668a67fdd854b56b7386facc28090_NeikiAnalytics.exe

    • Size

      137KB

    • MD5

      959668a67fdd854b56b7386facc28090

    • SHA1

      02c969c64e9e20711bb00b53a34995f5fa7c4524

    • SHA256

      d9ce548ccee86f992574905fcb869b10ab853f3fb1e4e0ce24b71d0f65193339

    • SHA512

      25838caaa0466346084094402858be59ae69da31ff9aad5c036f01cacd158e8b53c4e3a28664675dd774b472a8fddb4ea8ede138685cb158fc419bb0251072e5

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8yi61:fnyiQSo/

    Score
    9/10
    ransomwareupx

    • Renames multiple (516) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks