Overview

overview

9

Static

static

3

ff1bede089...cs.exe

windows7-x64

9

ff1bede089...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff1bede089edc88ecc86285da3479950_NeikiAnalytics.exe

  • Size

    158KB

  • Sample

    240524-xh1tjafc6t

  • MD5

    ff1bede089edc88ecc86285da3479950

  • SHA1

    b197f100529efb043132afa6e93fa25ba530198d

  • SHA256

    d4ae8631b87a36986b4dc090d7d18440be0928f527b1d7f2f666655aa0856b46

  • SHA512

    70a70da476047999b324dd2bb311cb549e400139f5e49582c8ee27a5be8cfe518fa3a71832519e695664c4e2d761b132f5a1c7ab99c51158d9e3401368bb240c

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKZJHJ/vM+7Z9pApQESOHepOHe8G+6Y:69WpQE0z29WpQE0z+

Score
9/10
ransomware

Malware Config

Targets

    • Target

      ff1bede089edc88ecc86285da3479950_NeikiAnalytics.exe

    • Size

      158KB

    • MD5

      ff1bede089edc88ecc86285da3479950

    • SHA1

      b197f100529efb043132afa6e93fa25ba530198d

    • SHA256

      d4ae8631b87a36986b4dc090d7d18440be0928f527b1d7f2f666655aa0856b46

    • SHA512

      70a70da476047999b324dd2bb311cb549e400139f5e49582c8ee27a5be8cfe518fa3a71832519e695664c4e2d761b132f5a1c7ab99c51158d9e3401368bb240c

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKZJHJ/vM+7Z9pApQESOHepOHe8G+6Y:69WpQE0z29WpQE0z+

    Score
    9/10
    ransomware

    • Renames multiple (3658) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks