Overview

overview

9

Static

static

3

8a3b2d43fd...cs.exe

windows7-x64

9

8a3b2d43fd...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a3b2d43fd63447cfd523ed1a06d70e0_NeikiAnalytics.exe

  • Size

    215KB

  • Sample

    240524-x3x85sgb9w

  • MD5

    8a3b2d43fd63447cfd523ed1a06d70e0

  • SHA1

    8adb76bebaafa632b260f3d7f344ca2056ef5783

  • SHA256

    00091f6a6937faf51b5b1840daa04058087e4eede8879b477e624e5641cfaab7

  • SHA512

    0d5b14a33a84e3c521f6a7ef3625a756a74654043ea568800707cea8e974dbb8b2312c75a044eee2ce17c49aebc2cd868e5e1b3fd4bc9737d0d1db433513981f

  • SSDEEP

    3072:69WpQEJAOE9tHpKrvGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2ExI:nfAB95pK7ShcHUan

Score
9/10
ransomware

Malware Config

Targets

    • Target

      8a3b2d43fd63447cfd523ed1a06d70e0_NeikiAnalytics.exe

    • Size

      215KB

    • MD5

      8a3b2d43fd63447cfd523ed1a06d70e0

    • SHA1

      8adb76bebaafa632b260f3d7f344ca2056ef5783

    • SHA256

      00091f6a6937faf51b5b1840daa04058087e4eede8879b477e624e5641cfaab7

    • SHA512

      0d5b14a33a84e3c521f6a7ef3625a756a74654043ea568800707cea8e974dbb8b2312c75a044eee2ce17c49aebc2cd868e5e1b3fd4bc9737d0d1db433513981f

    • SSDEEP

      3072:69WpQEJAOE9tHpKrvGCLOwstyhZFChcssc56FUrgxvbSD4UQrO2ExI:nfAB95pK7ShcHUan

    Score
    9/10
    ransomware

    • Renames multiple (3634) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks