Overview

overview

9

Static

static

7

36d44c4fcb...cs.exe

windows7-x64

9

36d44c4fcb...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36d44c4fcbe4113ce4f5037bbb444400_NeikiAnalytics.exe

  • Size

    74KB

  • Sample

    240525-ats7hagc2t

  • MD5

    36d44c4fcbe4113ce4f5037bbb444400

  • SHA1

    0f88a4ecb0da163fb9f3d029bbbd54ab7da8097b

  • SHA256

    d35e4e7e9b4842c9c62c2642d3afeb95f656f0a2b048930de95fefaf957eabd0

  • SHA512

    d254029af7d8eafc3101a2a5989d80ccd75f4fc8235348b13c2fff2e88b7d4e9349bda8b7b4b6eeb3541ac4009f47b67a6fcce6fbef0a8c80de1d43779fbd0c4

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8yi0:+nyiQSoF

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      36d44c4fcbe4113ce4f5037bbb444400_NeikiAnalytics.exe

    • Size

      74KB

    • MD5

      36d44c4fcbe4113ce4f5037bbb444400

    • SHA1

      0f88a4ecb0da163fb9f3d029bbbd54ab7da8097b

    • SHA256

      d35e4e7e9b4842c9c62c2642d3afeb95f656f0a2b048930de95fefaf957eabd0

    • SHA512

      d254029af7d8eafc3101a2a5989d80ccd75f4fc8235348b13c2fff2e88b7d4e9349bda8b7b4b6eeb3541ac4009f47b67a6fcce6fbef0a8c80de1d43779fbd0c4

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8yi0:+nyiQSoF

    Score
    9/10
    ransomwareupx

    • Renames multiple (3733) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks