Overview

overview

9

Static

static

3

8aa5d805e9...cs.exe

windows7-x64

9

8aa5d805e9...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8aa5d805e932f915f1bd26eee56e1740_NeikiAnalytics.exe

  • Size

    41KB

  • Sample

    240527-npw99ahg8x

  • MD5

    8aa5d805e932f915f1bd26eee56e1740

  • SHA1

    5771f2dc5d60d39cc6736905d78260d282312cb3

  • SHA256

    8627d0d5c6bd9ec09ab8abb668075d1a7acc1c45b6cdaaf4c97dac402b5c3be2

  • SHA512

    387f0f68d7368022cd292f1fdea0c497d386160d293e4ad8c5942850697ee167be70cd94faac70edd7fec8f3b0ea0e3359b96c4520fcc5291a6f2bce8ad7cdcf

  • SSDEEP

    384:GBt7Br5xjLMuLAgA71FbhvDl3DG71ul3DG71XUmUIYFrpSp7:W7BlpNLpARFbhblkYlkuvIYFrpSp7

Score
9/10
ransomware

Malware Config

Targets

    • Target

      8aa5d805e932f915f1bd26eee56e1740_NeikiAnalytics.exe

    • Size

      41KB

    • MD5

      8aa5d805e932f915f1bd26eee56e1740

    • SHA1

      5771f2dc5d60d39cc6736905d78260d282312cb3

    • SHA256

      8627d0d5c6bd9ec09ab8abb668075d1a7acc1c45b6cdaaf4c97dac402b5c3be2

    • SHA512

      387f0f68d7368022cd292f1fdea0c497d386160d293e4ad8c5942850697ee167be70cd94faac70edd7fec8f3b0ea0e3359b96c4520fcc5291a6f2bce8ad7cdcf

    • SSDEEP

      384:GBt7Br5xjLMuLAgA71FbhvDl3DG71ul3DG71XUmUIYFrpSp7:W7BlpNLpARFbhblkYlkuvIYFrpSp7

    Score
    9/10
    ransomware

    • Renames multiple (3732) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks