Overview

overview

9

Static

static

3

ff02208908...cs.exe

windows7-x64

9

ff02208908...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff02208908352a1d8cb814e2da1c0bd0_NeikiAnalytics.exe

  • Size

    164KB

  • Sample

    240524-xhl1daff33

  • MD5

    ff02208908352a1d8cb814e2da1c0bd0

  • SHA1

    0e2b710cc5209fa49f570a243ced3c9f28989821

  • SHA256

    415e6515233ec8000eef81d2b7c4ac7b0cd370d2a4ae0da0f961e1c641ba98ae

  • SHA512

    743339fe79da19babf1173b410569d7c60cc2e4daf9524d92a06941a3b264bcee5f56dd964000590e7d44237a9be5f33591405f0ff2c328fd8ef652a208bd11d

  • SSDEEP

    1536:W7ZDpApYbWj2WTWJe+e/qX17ZDpApYbWj2WTWJe+e/qX4wewT:6DWpaWTWJe+ekDWpaWTWJe+eRwewT

Score
9/10
ransomware

Malware Config

Targets

    • Target

      ff02208908352a1d8cb814e2da1c0bd0_NeikiAnalytics.exe

    • Size

      164KB

    • MD5

      ff02208908352a1d8cb814e2da1c0bd0

    • SHA1

      0e2b710cc5209fa49f570a243ced3c9f28989821

    • SHA256

      415e6515233ec8000eef81d2b7c4ac7b0cd370d2a4ae0da0f961e1c641ba98ae

    • SHA512

      743339fe79da19babf1173b410569d7c60cc2e4daf9524d92a06941a3b264bcee5f56dd964000590e7d44237a9be5f33591405f0ff2c328fd8ef652a208bd11d

    • SSDEEP

      1536:W7ZDpApYbWj2WTWJe+e/qX17ZDpApYbWj2WTWJe+e/qX4wewT:6DWpaWTWJe+ekDWpaWTWJe+eRwewT

    Score
    9/10
    ransomware

    • Renames multiple (4078) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks