Overview

overview

9

Static

static

7

95b729b2a7...cs.exe

windows7-x64

9

95b729b2a7...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95b729b2a787641a34ad6d5f576202f0_NeikiAnalytics.exe

  • Size

    66KB

  • Sample

    240525-kw7ssacb5w

  • MD5

    95b729b2a787641a34ad6d5f576202f0

  • SHA1

    20f22177e64fd3956cdd055935b25b2e2dd87b8f

  • SHA256

    7ad48235269337c4d49325ecc0a46c4a405383051265d645057ca3491bc1d698

  • SHA512

    c55a3cdecfd49bd27a3baa305ee269ff61eb02990cccda858b7b8cf727735e8cec64e001780b04c07e6259649f1cd6a12ae6027a92ce47c239e96647dff0d79d

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZISWh7SWhp:+nyi/SWh7SWhp

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      95b729b2a787641a34ad6d5f576202f0_NeikiAnalytics.exe

    • Size

      66KB

    • MD5

      95b729b2a787641a34ad6d5f576202f0

    • SHA1

      20f22177e64fd3956cdd055935b25b2e2dd87b8f

    • SHA256

      7ad48235269337c4d49325ecc0a46c4a405383051265d645057ca3491bc1d698

    • SHA512

      c55a3cdecfd49bd27a3baa305ee269ff61eb02990cccda858b7b8cf727735e8cec64e001780b04c07e6259649f1cd6a12ae6027a92ce47c239e96647dff0d79d

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZISWh7SWhp:+nyi/SWh7SWhp

    Score
    9/10
    ransomwareupx

    • Renames multiple (3684) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks