Overview

overview

9

Static

static

3

365aad4358...cs.exe

windows7-x64

9

365aad4358...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    365aad4358804885e1d2e4cb9d2de010_NeikiAnalytics.exe

  • Size

    141KB

  • Sample

    240522-zfpdtsfg3t

  • MD5

    365aad4358804885e1d2e4cb9d2de010

  • SHA1

    747fbfb1e049b082410b47fb39d0dadf7a1c3776

  • SHA256

    8efb55cb779c6ce74ee790e9ea0f22c9a7d2c49060f36f39a2471bed141a9269

  • SHA512

    62dd4c97c0c895552650dc850d251051c181764b72ed4e624bf5101ccc2135344644dbc8b2683d3842678bc43a3a16b7a061dfa21cf12ccbb74b80a7548ca3ce

  • SSDEEP

    3072:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcksh/UV9WpQEoTdc6e6kvNDck7Tdc6e6kR:nSTdc6e6kvNDck7Tdc6e6kvNDckyUiS1

Score
9/10
ransomware

Malware Config

Targets

    • Target

      365aad4358804885e1d2e4cb9d2de010_NeikiAnalytics.exe

    • Size

      141KB

    • MD5

      365aad4358804885e1d2e4cb9d2de010

    • SHA1

      747fbfb1e049b082410b47fb39d0dadf7a1c3776

    • SHA256

      8efb55cb779c6ce74ee790e9ea0f22c9a7d2c49060f36f39a2471bed141a9269

    • SHA512

      62dd4c97c0c895552650dc850d251051c181764b72ed4e624bf5101ccc2135344644dbc8b2683d3842678bc43a3a16b7a061dfa21cf12ccbb74b80a7548ca3ce

    • SSDEEP

      3072:69WpQEoTdc6e6kvNDck7Tdc6e6kvNDcksh/UV9WpQEoTdc6e6kvNDck7Tdc6e6kR:nSTdc6e6kvNDck7Tdc6e6kvNDckyUiS1

    Score
    9/10
    ransomware

    • Renames multiple (4860) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks