Overview

overview

9

Static

static

3

3ee2b15ff4...cs.exe

windows7-x64

9

3ee2b15ff4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ee2b15ff49e5c17b03e1ae21c60dfb0_NeikiAnalytics.exe

  • Size

    158KB

  • Sample

    240522-z71k6shb8t

  • MD5

    3ee2b15ff49e5c17b03e1ae21c60dfb0

  • SHA1

    9ec92d67c487f20cf0d5b2885b6f2a3fae5c59cd

  • SHA256

    9a54f6ec78487a2b0a7b88f8011bc0b71e356578ba0d4d1b858fb4d8776d9fea

  • SHA512

    143fa35c0005b20d6bc9aae098722dd8377aba33d254c85b50f6fbb4bc2a5679d0a3fd15aefacda7a37eccf84f465e00339b50aa886ae0ed40f73d326373c3ee

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKZJHJ/vQ7Z9pApQESOHepOHe8G+6EU:69WpQE0zL9WpQE0zt

Score
9/10
ransomware

Malware Config

Targets

    • Target

      3ee2b15ff49e5c17b03e1ae21c60dfb0_NeikiAnalytics.exe

    • Size

      158KB

    • MD5

      3ee2b15ff49e5c17b03e1ae21c60dfb0

    • SHA1

      9ec92d67c487f20cf0d5b2885b6f2a3fae5c59cd

    • SHA256

      9a54f6ec78487a2b0a7b88f8011bc0b71e356578ba0d4d1b858fb4d8776d9fea

    • SHA512

      143fa35c0005b20d6bc9aae098722dd8377aba33d254c85b50f6fbb4bc2a5679d0a3fd15aefacda7a37eccf84f465e00339b50aa886ae0ed40f73d326373c3ee

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKZJHJ/vQ7Z9pApQESOHepOHe8G+6EU:69WpQE0zL9WpQE0zt

    Score
    9/10
    ransomware

    • Renames multiple (3959) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks