Overview

overview

9

Static

static

3

06f3ca391f...cs.exe

windows7-x64

9

06f3ca391f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06f3ca391f944e0255170f9cadd218c0_NeikiAnalytics.exe

  • Size

    165KB

  • Sample

    240525-rnva2sfe7s

  • MD5

    06f3ca391f944e0255170f9cadd218c0

  • SHA1

    6f6e57f307ef8724386ebe48c178e6b6a518b808

  • SHA256

    3fc11ab8047ed0ef881975a66c9e3459c0b437926168868be23f43ca0ef3083f

  • SHA512

    23b87d5f6b3472add7e3d35f0bb4787dff46ad8ecbb9a0036fec02846c24b225e301094809cff87804f58d80f2033dedb849c2e6a6a36c2f640cfb073dca52aa

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXaFe7WpMaxeb0CYJ97lEYNR73e+eKZ0VXl:RqKvb0CYJ973e+eKZ0VXqKvb0CYJ973k

Score
9/10
ransomware

Malware Config

Targets

    • Target

      06f3ca391f944e0255170f9cadd218c0_NeikiAnalytics.exe

    • Size

      165KB

    • MD5

      06f3ca391f944e0255170f9cadd218c0

    • SHA1

      6f6e57f307ef8724386ebe48c178e6b6a518b808

    • SHA256

      3fc11ab8047ed0ef881975a66c9e3459c0b437926168868be23f43ca0ef3083f

    • SHA512

      23b87d5f6b3472add7e3d35f0bb4787dff46ad8ecbb9a0036fec02846c24b225e301094809cff87804f58d80f2033dedb849c2e6a6a36c2f640cfb073dca52aa

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXaFe7WpMaxeb0CYJ97lEYNR73e+eKZ0VXl:RqKvb0CYJ973e+eKZ0VXqKvb0CYJ973k

    Score
    9/10
    ransomware

    • Renames multiple (3511) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks