Overview

overview

9

Static

static

3

4583597020...cs.exe

windows7-x64

9

4583597020...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    458359702021fe28dcb5aead9cb7ed80_NeikiAnalytics.exe

  • Size

    167KB

  • Sample

    240523-gcxa6afd82

  • MD5

    458359702021fe28dcb5aead9cb7ed80

  • SHA1

    ecebae2b0a591eaefaf576913518b704365a8b55

  • SHA256

    54a91a493427885c5a57eae92265ef6f1ad315581e0343c2eb3bf68609e6266d

  • SHA512

    3a6617e26a9c4fc14a3a4843fd682883e68e6cf9ce52557a80cd2fb9d36473615d8e321649d651ca571e303a85988d59f494ac76bee663c028a0b408b5ce7163

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBC:PqFF2Ie+e1EqFF2Ie+e1A

Score
9/10
ransomware

Malware Config

Targets

    • Target

      458359702021fe28dcb5aead9cb7ed80_NeikiAnalytics.exe

    • Size

      167KB

    • MD5

      458359702021fe28dcb5aead9cb7ed80

    • SHA1

      ecebae2b0a591eaefaf576913518b704365a8b55

    • SHA256

      54a91a493427885c5a57eae92265ef6f1ad315581e0343c2eb3bf68609e6266d

    • SHA512

      3a6617e26a9c4fc14a3a4843fd682883e68e6cf9ce52557a80cd2fb9d36473615d8e321649d651ca571e303a85988d59f494ac76bee663c028a0b408b5ce7163

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBC:PqFF2Ie+e1EqFF2Ie+e1A

    Score
    9/10
    ransomware

    • Renames multiple (3946) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks