Overview

overview

9

Static

static

3

88d9eeb18a...cs.exe

windows7-x64

9

88d9eeb18a...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88d9eeb18a97846cd4b685a53fecb0b0_NeikiAnalytics.exe

  • Size

    157KB

  • Sample

    240523-zwjtaagd6v

  • MD5

    88d9eeb18a97846cd4b685a53fecb0b0

  • SHA1

    ce7e90b24006ff4bb0eb8d418caa3a45501fd13b

  • SHA256

    7416cd60d3e80170a84c750d6c1d5eab21b8997e309c84946437b1febd34c423

  • SHA512

    9bfbc749d83fc6fd53525275129259f15897da4fe78aee4a2fd35220cf665e5e63da850deb3217c2e0945a6b5a6be77015e491728604112223f8d0bf99520494

  • SSDEEP

    3072:6DWpwE7oL2e+efZwZLDWpwE7oL2e+efZwZl:dN/e+efioN/e+efi3

Score
9/10
ransomware

Malware Config

Targets

    • Target

      88d9eeb18a97846cd4b685a53fecb0b0_NeikiAnalytics.exe

    • Size

      157KB

    • MD5

      88d9eeb18a97846cd4b685a53fecb0b0

    • SHA1

      ce7e90b24006ff4bb0eb8d418caa3a45501fd13b

    • SHA256

      7416cd60d3e80170a84c750d6c1d5eab21b8997e309c84946437b1febd34c423

    • SHA512

      9bfbc749d83fc6fd53525275129259f15897da4fe78aee4a2fd35220cf665e5e63da850deb3217c2e0945a6b5a6be77015e491728604112223f8d0bf99520494

    • SSDEEP

      3072:6DWpwE7oL2e+efZwZLDWpwE7oL2e+efZwZl:dN/e+efioN/e+efi3

    Score
    9/10
    ransomware

    • Renames multiple (3994) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks