Overview

overview

9

Static

static

3

62742a667a...cs.exe

windows7-x64

9

62742a667a...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62742a667a398cae72665f7c63e8d630_NeikiAnalytics.exe

  • Size

    152KB

  • Sample

    240523-at5kjafa45

  • MD5

    62742a667a398cae72665f7c63e8d630

  • SHA1

    b7316bb2f55d4199f9d4fe68e29b91ec2e7b4ba5

  • SHA256

    734abe2ed36154d7ddc73aeffba2d2af78f3b030648a3a168339ad4ecdeabfb0

  • SHA512

    375f55d288e8e312a2fbad7bb7257ad8db3ff8f02a8901637568b5d2c72ba6a121cf423b59934901f4e604067d7eb097f1b6b48af11a215d777bb8581a126ff8

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E65TGA3vY7Z9pApQESOHepOHe8G+6E65TGA3vM:69WpQEJAg9WpQEJAk

Score
9/10
ransomware

Malware Config

Targets

    • Target

      62742a667a398cae72665f7c63e8d630_NeikiAnalytics.exe

    • Size

      152KB

    • MD5

      62742a667a398cae72665f7c63e8d630

    • SHA1

      b7316bb2f55d4199f9d4fe68e29b91ec2e7b4ba5

    • SHA256

      734abe2ed36154d7ddc73aeffba2d2af78f3b030648a3a168339ad4ecdeabfb0

    • SHA512

      375f55d288e8e312a2fbad7bb7257ad8db3ff8f02a8901637568b5d2c72ba6a121cf423b59934901f4e604067d7eb097f1b6b48af11a215d777bb8581a126ff8

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E65TGA3vY7Z9pApQESOHepOHe8G+6E65TGA3vM:69WpQEJAg9WpQEJAk

    Score
    9/10
    ransomware

    • Renames multiple (5745) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks