Overview

overview

9

Static

static

3

82e62616c8...cs.exe

windows7-x64

9

82e62616c8...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82e62616c82891583e01b7687e4e8b80_NeikiAnalytics.exe

  • Size

    226KB

  • Sample

    240525-q9lqcseh8w

  • MD5

    82e62616c82891583e01b7687e4e8b80

  • SHA1

    44cf51ec7ed29419f5b0bc7b16dc5f026d114013

  • SHA256

    164858d8e06ec75ce27c8347af3021d02b0d426e3d947115be51248d726d2b8c

  • SHA512

    dd6755b5671b25ceed586deb3a31db7c944523e183b05e33449749adc626452e997fbf501447eead5257735704b8307a41267b78fdb18576f13cbddef3b0091f

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBP:PqFF2Ie+e1EO9xpKbShcHUaP

Score
9/10
ransomware

Malware Config

Targets

    • Target

      82e62616c82891583e01b7687e4e8b80_NeikiAnalytics.exe

    • Size

      226KB

    • MD5

      82e62616c82891583e01b7687e4e8b80

    • SHA1

      44cf51ec7ed29419f5b0bc7b16dc5f026d114013

    • SHA256

      164858d8e06ec75ce27c8347af3021d02b0d426e3d947115be51248d726d2b8c

    • SHA512

      dd6755b5671b25ceed586deb3a31db7c944523e183b05e33449749adc626452e997fbf501447eead5257735704b8307a41267b78fdb18576f13cbddef3b0091f

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBP:PqFF2Ie+e1EO9xpKbShcHUaP

    Score
    9/10
    ransomware

    • Renames multiple (1476) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks