Overview

overview

9

Static

static

3

524a214336...cs.exe

windows7-x64

9

524a214336...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    524a2143361140ae5babee1d1e35bdf0_NeikiAnalytics.exe

  • Size

    154KB

  • Sample

    240526-cwgmlabe5s

  • MD5

    524a2143361140ae5babee1d1e35bdf0

  • SHA1

    01949d9ba11da57c19924a37da48ac952eaa5cab

  • SHA256

    4444f0f9cf6c4349aa151c5b8014f693f0c1c426abd885b7b356527b57770e76

  • SHA512

    3e7b50606f1a7571e69e10c3028ddaa181103a232b748ccf2828cd9d69b1ef74faa3060b10b65bd461418e260a0860332fd4f07e5e36c4717a96c252700b68fd

  • SSDEEP

    384:GBt7Br5xjL9AgA71FbhvoBlLLmBt7Br5xjL9AgA71FbhvoBlLLV:W7BlpppARFbhf7BlpppARFbh+

Score
9/10
ransomware

Malware Config

Targets

    • Target

      524a2143361140ae5babee1d1e35bdf0_NeikiAnalytics.exe

    • Size

      154KB

    • MD5

      524a2143361140ae5babee1d1e35bdf0

    • SHA1

      01949d9ba11da57c19924a37da48ac952eaa5cab

    • SHA256

      4444f0f9cf6c4349aa151c5b8014f693f0c1c426abd885b7b356527b57770e76

    • SHA512

      3e7b50606f1a7571e69e10c3028ddaa181103a232b748ccf2828cd9d69b1ef74faa3060b10b65bd461418e260a0860332fd4f07e5e36c4717a96c252700b68fd

    • SSDEEP

      384:GBt7Br5xjL9AgA71FbhvoBlLLmBt7Br5xjL9AgA71FbhvoBlLLV:W7BlpppARFbhf7BlpppARFbh+

    Score
    9/10
    ransomware

    • Renames multiple (3860) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks