Overview

overview

9

Static

static

7

1afeadb591...cs.exe

windows7-x64

9

1afeadb591...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1afeadb591dd0a8ba5c10b60050b4290_NeikiAnalytics.exe

  • Size

    40KB

  • Sample

    240525-y7lxcahf86

  • MD5

    1afeadb591dd0a8ba5c10b60050b4290

  • SHA1

    489d4bde953d87c70e8e6e18d0b845f9624e7f14

  • SHA256

    14555244012a9d456e830e44407a71eb365a6c6904520cc57c56c07d6032092c

  • SHA512

    18e0b3ef34f55c2504244f272ff283ec4a52921d482b92b21b48d960a1769c54d0cf55f1544c0edecd9bf2ef5ae8ca701606c0edef975b1664827c615251ff20

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAF2q:CTWn1++PJHJXA/OsIZfzc3/Q82cicT

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1afeadb591dd0a8ba5c10b60050b4290_NeikiAnalytics.exe

    • Size

      40KB

    • MD5

      1afeadb591dd0a8ba5c10b60050b4290

    • SHA1

      489d4bde953d87c70e8e6e18d0b845f9624e7f14

    • SHA256

      14555244012a9d456e830e44407a71eb365a6c6904520cc57c56c07d6032092c

    • SHA512

      18e0b3ef34f55c2504244f272ff283ec4a52921d482b92b21b48d960a1769c54d0cf55f1544c0edecd9bf2ef5ae8ca701606c0edef975b1664827c615251ff20

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAF2q:CTWn1++PJHJXA/OsIZfzc3/Q82cicT

    Score
    9/10
    ransomwareupx

    • Renames multiple (900) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks