Overview

overview

9

Static

static

3

29690fbcbf...cs.exe

windows7-x64

9

29690fbcbf...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29690fbcbf5c9f293f50f2bb4d8c0380_NeikiAnalytics.exe

  • Size

    168KB

  • Sample

    240525-jjp7jaah23

  • MD5

    29690fbcbf5c9f293f50f2bb4d8c0380

  • SHA1

    184cd5373c9783ac2a3c9d2cdec45f54cbdaef68

  • SHA256

    9153899ce76685fbfb9e637d1430e2625ee65dfbbbe5d7db3ac1175848c2e3cf

  • SHA512

    6d037cd6a0fe482719f4cfe6e859167ecc8229a71a3ecaaddc48a97b1e352a20001a0faba183a5c1182f86f8e990f49c1ce5aa007dcbb4d24cd62b4b9573e0ac

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXame7WpMaxeb0CYJ97lEYNR73e+eKZ0VXB:RqKvb0CYJ973e+eKZ0VmqKvb0CYJ973k

Score
9/10
ransomware

Malware Config

Targets

    • Target

      29690fbcbf5c9f293f50f2bb4d8c0380_NeikiAnalytics.exe

    • Size

      168KB

    • MD5

      29690fbcbf5c9f293f50f2bb4d8c0380

    • SHA1

      184cd5373c9783ac2a3c9d2cdec45f54cbdaef68

    • SHA256

      9153899ce76685fbfb9e637d1430e2625ee65dfbbbe5d7db3ac1175848c2e3cf

    • SHA512

      6d037cd6a0fe482719f4cfe6e859167ecc8229a71a3ecaaddc48a97b1e352a20001a0faba183a5c1182f86f8e990f49c1ce5aa007dcbb4d24cd62b4b9573e0ac

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXame7WpMaxeb0CYJ97lEYNR73e+eKZ0VXB:RqKvb0CYJ973e+eKZ0VmqKvb0CYJ973k

    Score
    9/10
    ransomware

    • Renames multiple (4389) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks