Overview

overview

9

Static

static

3

b2d9c54805...cs.exe

windows7-x64

9

b2d9c54805...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2d9c54805214a1309dd0d0555ab9ca0_NeikiAnalytics.exe

  • Size

    146KB

  • Sample

    240525-h6kd5aac9y

  • MD5

    b2d9c54805214a1309dd0d0555ab9ca0

  • SHA1

    db1f5bc5c0a07f4b6f4fe60770d3d2ac51e38ad1

  • SHA256

    8644ee9eccb00a27a78959bd6ede520b4896aac177bf235d5ba20d8fb8fb9f27

  • SHA512

    b02eb713d77c48d811e7b91df6efa71ff977d4a2648597ca8787f8bf341f6f0d9415f445f8fef88574c840f95c63fae018ddfb9d09925b79efe1b1101a6dca0e

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E65TGA3vu7Z9pApQESOHepOHe8G+6E65TGA3vT:69WpQEJAq9WpQEJAr

Score
9/10
ransomware

Malware Config

Targets

    • Target

      b2d9c54805214a1309dd0d0555ab9ca0_NeikiAnalytics.exe

    • Size

      146KB

    • MD5

      b2d9c54805214a1309dd0d0555ab9ca0

    • SHA1

      db1f5bc5c0a07f4b6f4fe60770d3d2ac51e38ad1

    • SHA256

      8644ee9eccb00a27a78959bd6ede520b4896aac177bf235d5ba20d8fb8fb9f27

    • SHA512

      b02eb713d77c48d811e7b91df6efa71ff977d4a2648597ca8787f8bf341f6f0d9415f445f8fef88574c840f95c63fae018ddfb9d09925b79efe1b1101a6dca0e

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E65TGA3vu7Z9pApQESOHepOHe8G+6E65TGA3vT:69WpQEJAq9WpQEJAr

    Score
    9/10
    ransomware

    • Renames multiple (4294) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks