Overview

overview

9

Static

static

7

3dd8ff79c3...cs.exe

windows7-x64

9

3dd8ff79c3...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dd8ff79c363ef4e46336a51dca58ab0_NeikiAnalytics.exe

  • Size

    217KB

  • Sample

    240526-am1m1afg7y

  • MD5

    3dd8ff79c363ef4e46336a51dca58ab0

  • SHA1

    402d5572d92e071ea1757e7dce59ac1d9c36ae95

  • SHA256

    f423e88c6e3899162ea01e2e87234e6087ff97c055475eefb1e3e02a44891c11

  • SHA512

    dcc57449dde56eae0a10802f9962b2203520fd70a9a4d5e2c3f898b8e5068b2fa55994888b7e55b8741c605e9c526a7d7b6210e2e4decda314acb5785062dbc0

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhfFfAIuZAIuYSMjoqtMHfhf1:JmCAIuZAIuDMVtM/XfAIuZAIuDMVtM/r

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      3dd8ff79c363ef4e46336a51dca58ab0_NeikiAnalytics.exe

    • Size

      217KB

    • MD5

      3dd8ff79c363ef4e46336a51dca58ab0

    • SHA1

      402d5572d92e071ea1757e7dce59ac1d9c36ae95

    • SHA256

      f423e88c6e3899162ea01e2e87234e6087ff97c055475eefb1e3e02a44891c11

    • SHA512

      dcc57449dde56eae0a10802f9962b2203520fd70a9a4d5e2c3f898b8e5068b2fa55994888b7e55b8741c605e9c526a7d7b6210e2e4decda314acb5785062dbc0

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhfFfAIuZAIuYSMjoqtMHfhf1:JmCAIuZAIuDMVtM/XfAIuZAIuDMVtM/r

    Score
    9/10
    ransomwareupx

    • Renames multiple (2887) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks