Overview

overview

9

Static

static

7

13fcf923e5...cs.exe

windows7-x64

9

13fcf923e5...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13fcf923e536aa8367288a21507710f0_NeikiAnalytics.exe

  • Size

    64KB

  • Sample

    240524-xr1j5aff9t

  • MD5

    13fcf923e536aa8367288a21507710f0

  • SHA1

    47d2f886769cea08a4d5cdc7dbbfac94254f9b5f

  • SHA256

    0d915dddbbecb3362fadf9a3834011096294767752021a13b0d145a8b3da5294

  • SHA512

    af6e27bcd86813f43d935527b259d0e2a52cc6189b82faf687d5ae19a7500858bd360bffd415f03cf4694d43e36ff1a05b9690bd44e311a17eb5376ee5bdc3ed

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8c9H:+nyiQSoB

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      13fcf923e536aa8367288a21507710f0_NeikiAnalytics.exe

    • Size

      64KB

    • MD5

      13fcf923e536aa8367288a21507710f0

    • SHA1

      47d2f886769cea08a4d5cdc7dbbfac94254f9b5f

    • SHA256

      0d915dddbbecb3362fadf9a3834011096294767752021a13b0d145a8b3da5294

    • SHA512

      af6e27bcd86813f43d935527b259d0e2a52cc6189b82faf687d5ae19a7500858bd360bffd415f03cf4694d43e36ff1a05b9690bd44e311a17eb5376ee5bdc3ed

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8c9H:+nyiQSoB

    Score
    9/10
    ransomwareupx

    • Renames multiple (926) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks