Overview

overview

9

Static

static

7

0e624c0f7b...cs.exe

windows7-x64

9

0e624c0f7b...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e624c0f7be4c9882871986836da4e20_NeikiAnalytics.exe

  • Size

    59KB

  • Sample

    240522-y6zrtafd53

  • MD5

    0e624c0f7be4c9882871986836da4e20

  • SHA1

    1a6bbb95d5b8b697db570ae29294562fae7f3c3b

  • SHA256

    c2057f2b7572393607de40beb4596e6288ed602ce5db9dc260178f291ea3ea57

  • SHA512

    2cdf6514a60a236a0b3f78d5f6e9435b8be3487698041ee7674571b6bbf208f4d2becdeb3c03d00d8b9d9305de38e89d3fd7346ff8ef083492cd9216f9c79bcf

  • SSDEEP

    768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmvjxHvD:67Zf/FAxTWY1++PJHJXA/OsIZ0v9Hv9V

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      0e624c0f7be4c9882871986836da4e20_NeikiAnalytics.exe

    • Size

      59KB

    • MD5

      0e624c0f7be4c9882871986836da4e20

    • SHA1

      1a6bbb95d5b8b697db570ae29294562fae7f3c3b

    • SHA256

      c2057f2b7572393607de40beb4596e6288ed602ce5db9dc260178f291ea3ea57

    • SHA512

      2cdf6514a60a236a0b3f78d5f6e9435b8be3487698041ee7674571b6bbf208f4d2becdeb3c03d00d8b9d9305de38e89d3fd7346ff8ef083492cd9216f9c79bcf

    • SSDEEP

      768:67Blpf/FAK65euBT37CPKK0SjHm0CAbLg++PJHJzIWD+dVdCYgck5sIZFmvjxHvD:67Zf/FAxTWY1++PJHJXA/OsIZ0v9Hv9V

    Score
    9/10
    ransomwareupx

    • Renames multiple (3477) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks