Overview

overview

9

Static

static

7

8d32954f50...cs.exe

windows7-x64

9

8d32954f50...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d32954f507b62d7d399c0fbda73b3c0_NeikiAnalytics.exe

  • Size

    203KB

  • Sample

    240523-xwbrkada48

  • MD5

    8d32954f507b62d7d399c0fbda73b3c0

  • SHA1

    1b5504b43fae9369b89be3985fdaa7b78df2e50e

  • SHA256

    7e775d102a6c5f6f855d67f95d2ac9457dd955cd9d453becef6e5e506fb37a77

  • SHA512

    4137440dda0fa7148f32bbf6824ddd8dea66e0db8eb946ef4698b518d7dc6737823d35d1e999fc75e721ca62ab3cf75a34ae1163c5a99337a001f0b82f008e91

  • SSDEEP

    3072:enaym3AIuZAIuYSMjoqtMHfhfJ6W2QZwKS79:wHm3AIuZAIuDMVtM/L2ZKS79

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      8d32954f507b62d7d399c0fbda73b3c0_NeikiAnalytics.exe

    • Size

      203KB

    • MD5

      8d32954f507b62d7d399c0fbda73b3c0

    • SHA1

      1b5504b43fae9369b89be3985fdaa7b78df2e50e

    • SHA256

      7e775d102a6c5f6f855d67f95d2ac9457dd955cd9d453becef6e5e506fb37a77

    • SHA512

      4137440dda0fa7148f32bbf6824ddd8dea66e0db8eb946ef4698b518d7dc6737823d35d1e999fc75e721ca62ab3cf75a34ae1163c5a99337a001f0b82f008e91

    • SSDEEP

      3072:enaym3AIuZAIuYSMjoqtMHfhfJ6W2QZwKS79:wHm3AIuZAIuDMVtM/L2ZKS79

    Score
    9/10
    ransomwareupx

    • Renames multiple (2936) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks