Overview

overview

9

Static

static

7

1b9034b1de...cs.exe

windows7-x64

9

1b9034b1de...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b9034b1de6e6b24d57b29eef49a10b0_NeikiAnalytics.exe

  • Size

    67KB

  • Sample

    240529-aasrmahh3s

  • MD5

    1b9034b1de6e6b24d57b29eef49a10b0

  • SHA1

    1680947f05d09cd30add7a6e9234dc4655113fc8

  • SHA256

    f75982d065e118b592f786dd17ab1babf0b7b2f9ef307471e034e191aa58343a

  • SHA512

    23fecc44a4cd170620191f033eefe77e1c3f0ee4c198879124b5f31b26d575e37050d687718b34e3a1fcce5231b83b60a0d0aebf0f59c9250cae080cc8b0eb13

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJAJS:fnyiQSo2

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      1b9034b1de6e6b24d57b29eef49a10b0_NeikiAnalytics.exe

    • Size

      67KB

    • MD5

      1b9034b1de6e6b24d57b29eef49a10b0

    • SHA1

      1680947f05d09cd30add7a6e9234dc4655113fc8

    • SHA256

      f75982d065e118b592f786dd17ab1babf0b7b2f9ef307471e034e191aa58343a

    • SHA512

      23fecc44a4cd170620191f033eefe77e1c3f0ee4c198879124b5f31b26d575e37050d687718b34e3a1fcce5231b83b60a0d0aebf0f59c9250cae080cc8b0eb13

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8xJAJS:fnyiQSo2

    Score
    9/10
    ransomwareupx

    • Renames multiple (3739) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks