Overview

overview

9

Static

static

7

1b66f1dd97...cs.exe

windows7-x64

9

1b66f1dd97...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b66f1dd9729ade1d4a1277356553310_NeikiAnalytics.exe

  • Size

    202KB

  • Sample

    240525-y8x11ahc6v

  • MD5

    1b66f1dd9729ade1d4a1277356553310

  • SHA1

    0b6607b7161e09635d9d010f93dd875ab9b7ebd2

  • SHA256

    23b6b02888e21c328eb443450d2d960524117c90c7d664f4e101c43dd554ea54

  • SHA512

    66f0d4d732e31e9429f36a41f3e2dec89dfbf42242528970acefc3dc1348fdc8e8cbb2e65b3fb5b29178f8bd076aab8cc603cdf1dac9319eaabe5fc9f824fbc8

  • SSDEEP

    3072:enaym3AIuZAIuYSMjoqtMHfhfJ6W2QZwKS7y:wHm3AIuZAIuDMVtM/L2ZKS7y

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1b66f1dd9729ade1d4a1277356553310_NeikiAnalytics.exe

    • Size

      202KB

    • MD5

      1b66f1dd9729ade1d4a1277356553310

    • SHA1

      0b6607b7161e09635d9d010f93dd875ab9b7ebd2

    • SHA256

      23b6b02888e21c328eb443450d2d960524117c90c7d664f4e101c43dd554ea54

    • SHA512

      66f0d4d732e31e9429f36a41f3e2dec89dfbf42242528970acefc3dc1348fdc8e8cbb2e65b3fb5b29178f8bd076aab8cc603cdf1dac9319eaabe5fc9f824fbc8

    • SSDEEP

      3072:enaym3AIuZAIuYSMjoqtMHfhfJ6W2QZwKS7y:wHm3AIuZAIuDMVtM/L2ZKS7y

    Score
    9/10
    ransomwareupx

    • Renames multiple (429) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks