Overview

overview

9

Static

static

3

5df634e9c7...cs.exe

windows7-x64

9

5df634e9c7...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5df634e9c763893b64d2e8a78c1a8a80_NeikiAnalytics.exe

  • Size

    151KB

  • Sample

    240523-abxrzaeb84

  • MD5

    5df634e9c763893b64d2e8a78c1a8a80

  • SHA1

    f6036758f44c123ea80ae186122876fe614fed8b

  • SHA256

    50d047cb7f7fb204769ae7a77bf1cfae27320e83eef39f1c6e3c15da6c720b8e

  • SHA512

    d8b69b1327bdfc358a465e7701d6a163a651afa4a6e4039059ea2fa4701ced3fe9a796193e43c601f18149e321180e411756b8e8be88f1104ddec3eea0a7687f

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBa:PqFF2Ie+e1SqFF2Ie+e1a

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5df634e9c763893b64d2e8a78c1a8a80_NeikiAnalytics.exe

    • Size

      151KB

    • MD5

      5df634e9c763893b64d2e8a78c1a8a80

    • SHA1

      f6036758f44c123ea80ae186122876fe614fed8b

    • SHA256

      50d047cb7f7fb204769ae7a77bf1cfae27320e83eef39f1c6e3c15da6c720b8e

    • SHA512

      d8b69b1327bdfc358a465e7701d6a163a651afa4a6e4039059ea2fa4701ced3fe9a796193e43c601f18149e321180e411756b8e8be88f1104ddec3eea0a7687f

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBa:PqFF2Ie+e1SqFF2Ie+e1a

    Score
    9/10
    ransomware

    • Renames multiple (4087) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks