Overview

overview

9

Static

static

3

ee17e41897...cs.exe

windows7-x64

9

ee17e41897...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee17e418976c386172f3a6e399c2dc50_NeikiAnalytics.exe

  • Size

    85KB

  • Sample

    240525-qq749aee74

  • MD5

    ee17e418976c386172f3a6e399c2dc50

  • SHA1

    fb329d8566486c41b0cae075bfef42c33ca23bfe

  • SHA256

    6f243acd00fd91cfaee8c9a047a0265f4e3d6dd20daf60b7222fd091a9d2a616

  • SHA512

    fad0f39424f885eb10a37f76b0e2ab4c2b0151da3719b5d87a41ef2872509aeef50ce394c1d051653c54caeff9cebafe2982aa0b1048457153aef2c3fc8778a8

  • SSDEEP

    1536:W7ZNLpApCZuvIYF7ZNLpApCZuvIYiMDMt:6NLWpCZLYPNLWpCZLYM

Score
9/10
ransomware

Malware Config

Targets

    • Target

      ee17e418976c386172f3a6e399c2dc50_NeikiAnalytics.exe

    • Size

      85KB

    • MD5

      ee17e418976c386172f3a6e399c2dc50

    • SHA1

      fb329d8566486c41b0cae075bfef42c33ca23bfe

    • SHA256

      6f243acd00fd91cfaee8c9a047a0265f4e3d6dd20daf60b7222fd091a9d2a616

    • SHA512

      fad0f39424f885eb10a37f76b0e2ab4c2b0151da3719b5d87a41ef2872509aeef50ce394c1d051653c54caeff9cebafe2982aa0b1048457153aef2c3fc8778a8

    • SSDEEP

      1536:W7ZNLpApCZuvIYF7ZNLpApCZuvIYiMDMt:6NLWpCZLYPNLWpCZLYM

    Score
    9/10
    ransomware

    • Renames multiple (1524) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks