Overview

overview

9

Static

static

3

fc9c63fd39...cs.exe

windows7-x64

9

fc9c63fd39...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc9c63fd3945e0ea9fadc202b8dc1fe0_NeikiAnalytics.exe

  • Size

    167KB

  • Sample

    240523-v8g31aag74

  • MD5

    fc9c63fd3945e0ea9fadc202b8dc1fe0

  • SHA1

    06a7606f4ed95ef5f165e111987facecb1e4b74b

  • SHA256

    8cd514b890b91d91baa477b1a3a0390c23d6d11f31af50a6f4a59f7500972b0d

  • SHA512

    24a468235bf3256211d2b279d75fc489b2ec93890f6827e7f3474123ad6e1623ba2ac864c8c0ea45bf7db7d8dc45ddb9a5aea8ad4ce25dabacebb2012dd61faa

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXage7WpMaxeb0CYJ97lEYNR73e+eKZ0VX4:RqKvb0CYJ973e+eKZ0V4qKvb0CYJ9739

Score
9/10
ransomware

Malware Config

Targets

    • Target

      fc9c63fd3945e0ea9fadc202b8dc1fe0_NeikiAnalytics.exe

    • Size

      167KB

    • MD5

      fc9c63fd3945e0ea9fadc202b8dc1fe0

    • SHA1

      06a7606f4ed95ef5f165e111987facecb1e4b74b

    • SHA256

      8cd514b890b91d91baa477b1a3a0390c23d6d11f31af50a6f4a59f7500972b0d

    • SHA512

      24a468235bf3256211d2b279d75fc489b2ec93890f6827e7f3474123ad6e1623ba2ac864c8c0ea45bf7db7d8dc45ddb9a5aea8ad4ce25dabacebb2012dd61faa

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXage7WpMaxeb0CYJ97lEYNR73e+eKZ0VX4:RqKvb0CYJ973e+eKZ0V4qKvb0CYJ9739

    Score
    9/10
    ransomware

    • Renames multiple (5349) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks