Overview

overview

9

Static

static

7

28f3c75c65...cs.exe

windows7-x64

9

28f3c75c65...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28f3c75c653b68e6802f761038b5f180_NeikiAnalytics.exe

  • Size

    63KB

  • Sample

    240528-anszjsgf39

  • MD5

    28f3c75c653b68e6802f761038b5f180

  • SHA1

    b46b213056cee12ca58c8b0ae5d6680dea3085eb

  • SHA256

    0d984e87a34d76e77b7a12ccd7ed8b31af7c52b029c340929e7af6fc1f1e6899

  • SHA512

    c9dac0271d21437cdc7979538df4e12395692e63b5fb76187a142435880d4031f9c663d3d7bff96512cea312a50daeac62981fc36832fce88172728fba2f38b6

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8Q:fnyiQSon

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      28f3c75c653b68e6802f761038b5f180_NeikiAnalytics.exe

    • Size

      63KB

    • MD5

      28f3c75c653b68e6802f761038b5f180

    • SHA1

      b46b213056cee12ca58c8b0ae5d6680dea3085eb

    • SHA256

      0d984e87a34d76e77b7a12ccd7ed8b31af7c52b029c340929e7af6fc1f1e6899

    • SHA512

      c9dac0271d21437cdc7979538df4e12395692e63b5fb76187a142435880d4031f9c663d3d7bff96512cea312a50daeac62981fc36832fce88172728fba2f38b6

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8Q:fnyiQSon

    Score
    9/10
    ransomwareupx

    • Renames multiple (3756) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks