Overview

overview

9

Static

static

3

0ba79985ad...cs.exe

windows7-x64

9

0ba79985ad...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ba79985ad6b1d307f14d310b445cc20_NeikiAnalytics.exe

  • Size

    88KB

  • Sample

    240523-jj9aeahh3w

  • MD5

    0ba79985ad6b1d307f14d310b445cc20

  • SHA1

    47cf5b365496e316595883ddfcda5573e3792545

  • SHA256

    a2da2b4cc4ab07c2fb66e177ce659b347cc083d101fc2157f183f582ad2a8a82

  • SHA512

    103184c540ff12ed8e51f00165c11f03711263375b70b41b141b2deff175ac347bf40dc79f100dbfeaa6cbb7c797f5fb84db6517904c4685e4bd7c9343bd046c

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNl:6rWpcOPxPke+e3fFpsJOfFpsJbgEz

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0ba79985ad6b1d307f14d310b445cc20_NeikiAnalytics.exe

    • Size

      88KB

    • MD5

      0ba79985ad6b1d307f14d310b445cc20

    • SHA1

      47cf5b365496e316595883ddfcda5573e3792545

    • SHA256

      a2da2b4cc4ab07c2fb66e177ce659b347cc083d101fc2157f183f582ad2a8a82

    • SHA512

      103184c540ff12ed8e51f00165c11f03711263375b70b41b141b2deff175ac347bf40dc79f100dbfeaa6cbb7c797f5fb84db6517904c4685e4bd7c9343bd046c

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNl:6rWpcOPxPke+e3fFpsJOfFpsJbgEz

    Score
    9/10
    ransomware

    • Renames multiple (3500) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks