Overview

overview

9

Static

static

3

18020b7958...cs.exe

windows7-x64

9

18020b7958...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    18020b7958b5ce28c7e41ac62d595f30_NeikiAnalytics.exe

  • Size

    92KB

  • Sample

    240527-kxrsysfc95

  • MD5

    18020b7958b5ce28c7e41ac62d595f30

  • SHA1

    b6c71317c0247d5cc10d2d41c5227af55eea72dc

  • SHA256

    0db84f5a54b0d7188e91491fa9aba3c660ad9bcf3404507036e4503b994fe6dd

  • SHA512

    fa2a70e63f8dbe28982c910f937562622cf77ad4e2f3a478a96e4d41a4ecfff3e5106780f3f8267a5cbfa52b2fa4141003e2fab7b3946876cc9154cf608a82ac

  • SSDEEP

    1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPN0U6PG0PGB:6rWpcOPxPke+e3fFpsJOfFpsJbgEmPx6

Score
9/10
ransomware

Malware Config

Targets

    • Target

      18020b7958b5ce28c7e41ac62d595f30_NeikiAnalytics.exe

    • Size

      92KB

    • MD5

      18020b7958b5ce28c7e41ac62d595f30

    • SHA1

      b6c71317c0247d5cc10d2d41c5227af55eea72dc

    • SHA256

      0db84f5a54b0d7188e91491fa9aba3c660ad9bcf3404507036e4503b994fe6dd

    • SHA512

      fa2a70e63f8dbe28982c910f937562622cf77ad4e2f3a478a96e4d41a4ecfff3e5106780f3f8267a5cbfa52b2fa4141003e2fab7b3946876cc9154cf608a82ac

    • SSDEEP

      1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPN0U6PG0PGB:6rWpcOPxPke+e3fFpsJOfFpsJbgEmPx6

    Score
    9/10
    ransomware

    • Renames multiple (3452) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks