Overview

overview

9

Static

static

3

9661f7f3c8...cs.exe

windows7-x64

9

9661f7f3c8...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9661f7f3c8cacaa8c09e62b22e4c33b0_NeikiAnalytics.exe

  • Size

    101KB

  • Sample

    240523-15tkhsah9w

  • MD5

    9661f7f3c8cacaa8c09e62b22e4c33b0

  • SHA1

    df90cec814692d8c4e568c986e81d881709ce9c0

  • SHA256

    d173bc1a351a18dfd138a52334a2cad5eec868d6ba6954272e5b7802d5a855ee

  • SHA512

    b95ea7f7deb0615f8ad9f09f76ba22cbf3dcd597b16e255a437a6412c275fbfd1562dce0dfba5b185ee2aad108263acb1cfca54e3ff4f228547cc2c459a094cc

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEU0A0y:tFPxPke+eIW

Score
9/10
ransomware

Malware Config

Targets

    • Target

      9661f7f3c8cacaa8c09e62b22e4c33b0_NeikiAnalytics.exe

    • Size

      101KB

    • MD5

      9661f7f3c8cacaa8c09e62b22e4c33b0

    • SHA1

      df90cec814692d8c4e568c986e81d881709ce9c0

    • SHA256

      d173bc1a351a18dfd138a52334a2cad5eec868d6ba6954272e5b7802d5a855ee

    • SHA512

      b95ea7f7deb0615f8ad9f09f76ba22cbf3dcd597b16e255a437a6412c275fbfd1562dce0dfba5b185ee2aad108263acb1cfca54e3ff4f228547cc2c459a094cc

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEU0A0y:tFPxPke+eIW

    Score
    9/10
    ransomware

    • Renames multiple (3425) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks