Overview

overview

9

Static

static

3

18b75851a7...cs.exe

windows7-x64

9

18b75851a7...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18b75851a7e6a3c981c92048d4506af0_NeikiAnalytics.exe

  • Size

    60KB

  • Sample

    240523-wa6t5sah63

  • MD5

    18b75851a7e6a3c981c92048d4506af0

  • SHA1

    191162ffe238770d32560c047400692f70946e7d

  • SHA256

    247ef06508859bb6aa9aa3056ee20176df3898d2c674257f9ffbfdaaaef48f2b

  • SHA512

    2ed6a566a12e9b0bb1f78d14d07198f8967a673fe8cf4b0649d816671f3c51069db59acbd43bdfe6ea374c0998794d6d2fa48e578c160c9d98c6a85fff827dcd

  • SSDEEP

    768:W7Blp9pARFbhQSox/6Sox/ME4JAIAepE4JAIAeuDlmlQPc3f6Pc3f5TGotuMOiJW:W7Z9pApQESOHepOHe8G+6E65TGAm

Score
9/10
ransomware

Malware Config

Targets

    • Target

      18b75851a7e6a3c981c92048d4506af0_NeikiAnalytics.exe

    • Size

      60KB

    • MD5

      18b75851a7e6a3c981c92048d4506af0

    • SHA1

      191162ffe238770d32560c047400692f70946e7d

    • SHA256

      247ef06508859bb6aa9aa3056ee20176df3898d2c674257f9ffbfdaaaef48f2b

    • SHA512

      2ed6a566a12e9b0bb1f78d14d07198f8967a673fe8cf4b0649d816671f3c51069db59acbd43bdfe6ea374c0998794d6d2fa48e578c160c9d98c6a85fff827dcd

    • SSDEEP

      768:W7Blp9pARFbhQSox/6Sox/ME4JAIAepE4JAIAeuDlmlQPc3f6Pc3f5TGotuMOiJW:W7Z9pApQESOHepOHe8G+6E65TGAm

    Score
    9/10
    ransomware

    • Renames multiple (3832) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks