Overview

overview

9

Static

static

3

36d279d6aa...cs.exe

windows7-x64

9

36d279d6aa...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36d279d6aa44b97c611388c7117a4e90_NeikiAnalytics.exe

  • Size

    158KB

  • Sample

    240522-yqxbraed6y

  • MD5

    36d279d6aa44b97c611388c7117a4e90

  • SHA1

    bb5cd3e60a72519ed9b40b1de167f6a727953689

  • SHA256

    b5bd976edd86190cc2f1ccf438401995b9df26ff82db8c889ad6d84fbcdd127b

  • SHA512

    07a67732729a187fa3323a4a7af3fee33179cd1ee39df4fdf08870ed64e95fcbae7c62a21d056c4663a9f1780c74ec7ded350e5c003f8a1c6bc4dee28a5d9d35

  • SSDEEP

    3072:6DWpwE7oL2e+efZwZUDWpwE7oL2e+efZwZt:dN/e+efiRN/e+efiH

Score
9/10
ransomware

Malware Config

Targets

    • Target

      36d279d6aa44b97c611388c7117a4e90_NeikiAnalytics.exe

    • Size

      158KB

    • MD5

      36d279d6aa44b97c611388c7117a4e90

    • SHA1

      bb5cd3e60a72519ed9b40b1de167f6a727953689

    • SHA256

      b5bd976edd86190cc2f1ccf438401995b9df26ff82db8c889ad6d84fbcdd127b

    • SHA512

      07a67732729a187fa3323a4a7af3fee33179cd1ee39df4fdf08870ed64e95fcbae7c62a21d056c4663a9f1780c74ec7ded350e5c003f8a1c6bc4dee28a5d9d35

    • SSDEEP

      3072:6DWpwE7oL2e+efZwZUDWpwE7oL2e+efZwZt:dN/e+efiRN/e+efiH

    Score
    9/10
    ransomware

    • Renames multiple (4068) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks