Overview

overview

9

Static

static

3

90defdaabd...cs.exe

windows7-x64

9

90defdaabd...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90defdaabd102bbffa292ffc3e501020_NeikiAnalytics.exe

  • Size

    631KB

  • Sample

    240523-1lq1aahh53

  • MD5

    90defdaabd102bbffa292ffc3e501020

  • SHA1

    30c6ff16b1bb70d179a101a0ddef16be62b209fc

  • SHA256

    85615f28897e82ee9bdeb3abb854da82cec48ea369521d73dd5d2ac0d664598d

  • SHA512

    b9263c9ca2acec3e016daa4252cbce34c829479f92e1a4a288602f98fbaba1b1b1642b1038122a589b45a0bcaff9924b6ee0c8be770e7b5557f9ca60644430af

  • SSDEEP

    3072:6pWpOjgGwLGK4Uk0Ycoi6DdP51S2XI5cgGlKFTvr5pgx1v9/oLUmP9nV7xi:P47wj4kYcopdPm2ac8+1vVmPHA

Score
9/10
ransomware

Malware Config

Targets

    • Target

      90defdaabd102bbffa292ffc3e501020_NeikiAnalytics.exe

    • Size

      631KB

    • MD5

      90defdaabd102bbffa292ffc3e501020

    • SHA1

      30c6ff16b1bb70d179a101a0ddef16be62b209fc

    • SHA256

      85615f28897e82ee9bdeb3abb854da82cec48ea369521d73dd5d2ac0d664598d

    • SHA512

      b9263c9ca2acec3e016daa4252cbce34c829479f92e1a4a288602f98fbaba1b1b1642b1038122a589b45a0bcaff9924b6ee0c8be770e7b5557f9ca60644430af

    • SSDEEP

      3072:6pWpOjgGwLGK4Uk0Ycoi6DdP51S2XI5cgGlKFTvr5pgx1v9/oLUmP9nV7xi:P47wj4kYcopdPm2ac8+1vVmPHA

    Score
    9/10
    ransomware

    • Renames multiple (3678) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks