Overview

overview

9

Static

static

3

9313d15ac2...cs.exe

windows7-x64

9

9313d15ac2...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9313d15ac2b140c447b9f6acde14be10_NeikiAnalytics.exe

  • Size

    122KB

  • Sample

    240603-bg71kadf8z

  • MD5

    9313d15ac2b140c447b9f6acde14be10

  • SHA1

    28de707100c2ea7d1009c16de42045f6d2fd1c16

  • SHA256

    d96c23cb2ee7e92677eb27404a0536e17c895f1fa7a784b6bceac92d95cf339f

  • SHA512

    94bc403ec23065549c1a1b731071f6b52602bcca66915a54ef1639c3aa5a7fe936b9a5981720173ba3176b0d9eee6063765646a633119dcbd76d45f15b4abf6c

  • SSDEEP

    1536:W7ZDpApYbWjIoPyPoLzV7c6Shg7ZDpApYbWjIoPyPoLzV7c6ShyLl:6DWpHDWpz

Score
9/10
ransomware

Malware Config

Targets

    • Target

      9313d15ac2b140c447b9f6acde14be10_NeikiAnalytics.exe

    • Size

      122KB

    • MD5

      9313d15ac2b140c447b9f6acde14be10

    • SHA1

      28de707100c2ea7d1009c16de42045f6d2fd1c16

    • SHA256

      d96c23cb2ee7e92677eb27404a0536e17c895f1fa7a784b6bceac92d95cf339f

    • SHA512

      94bc403ec23065549c1a1b731071f6b52602bcca66915a54ef1639c3aa5a7fe936b9a5981720173ba3176b0d9eee6063765646a633119dcbd76d45f15b4abf6c

    • SSDEEP

      1536:W7ZDpApYbWjIoPyPoLzV7c6Shg7ZDpApYbWjIoPyPoLzV7c6ShyLl:6DWpHDWpz

    Score
    9/10
    ransomware

    • Renames multiple (4915) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks