Overview

overview

9

Static

static

7

7e04b84da3...cs.exe

windows7-x64

9

7e04b84da3...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e04b84da398f973a13bbd9af13cdca0_NeikiAnalytics.exe

  • Size

    71KB

  • Sample

    240523-dh3tcabe61

  • MD5

    7e04b84da398f973a13bbd9af13cdca0

  • SHA1

    1506a1a789bab08652b787dac9dfa0df3ebdd7ab

  • SHA256

    d670a53ff7b6e7a2ab02d7298f9057f768c630a657c86aefe4479026518dd0a1

  • SHA512

    e800e85d173a2c9a3b1693d77f06cbfdb4f259ffebbee0de74f74b4643b345383afdb563183a8f831e64f88fba732f940785a03cf1c1e78514a45765731a0077

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJo:+nyiQSom

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      7e04b84da398f973a13bbd9af13cdca0_NeikiAnalytics.exe

    • Size

      71KB

    • MD5

      7e04b84da398f973a13bbd9af13cdca0

    • SHA1

      1506a1a789bab08652b787dac9dfa0df3ebdd7ab

    • SHA256

      d670a53ff7b6e7a2ab02d7298f9057f768c630a657c86aefe4479026518dd0a1

    • SHA512

      e800e85d173a2c9a3b1693d77f06cbfdb4f259ffebbee0de74f74b4643b345383afdb563183a8f831e64f88fba732f940785a03cf1c1e78514a45765731a0077

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJo:+nyiQSom

    Score
    9/10
    ransomwareupx

    • Renames multiple (3440) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks