Overview

overview

9

Static

static

7

1dd879f098...cs.exe

windows7-x64

9

1dd879f098...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1dd879f098f6bee99725d25deaf54820_NeikiAnalytics.exe

  • Size

    74KB

  • Sample

    240525-zj244aac88

  • MD5

    1dd879f098f6bee99725d25deaf54820

  • SHA1

    5df0a0b53c568ee489919de2b5755ded31a495d9

  • SHA256

    cfb90e1d96bf9d8d0a20e56bfa41e83e49663ae0c3b77fbe75dcf7983eaa3db1

  • SHA512

    7fe08349ce588df43084f6c4f128e36b9e91b7a76c590c8404672756907d5e246aa689df11107aaf9318a0a845defb6e357b92d6601f5e393114599dc1fa5fd9

  • SSDEEP

    1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJU:+nyiQSo+

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1dd879f098f6bee99725d25deaf54820_NeikiAnalytics.exe

    • Size

      74KB

    • MD5

      1dd879f098f6bee99725d25deaf54820

    • SHA1

      5df0a0b53c568ee489919de2b5755ded31a495d9

    • SHA256

      cfb90e1d96bf9d8d0a20e56bfa41e83e49663ae0c3b77fbe75dcf7983eaa3db1

    • SHA512

      7fe08349ce588df43084f6c4f128e36b9e91b7a76c590c8404672756907d5e246aa689df11107aaf9318a0a845defb6e357b92d6601f5e393114599dc1fa5fd9

    • SSDEEP

      1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJJMJJU:+nyiQSo+

    Score
    9/10
    ransomwareupx

    • Renames multiple (3701) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks