Overview

overview

9

Static

static

7

004c383107...cs.exe

windows7-x64

9

004c383107...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    004c3831071fc74105f7cbd8c26eb900_NeikiAnalytics.exe

  • Size

    225KB

  • Sample

    240603-zhn6vahh86

  • MD5

    004c3831071fc74105f7cbd8c26eb900

  • SHA1

    1f2f019c93d5eaf3695af1a560d602b580ec6bd9

  • SHA256

    50606f4b1a9b7eb260e7019c007570eaf88a6e4b6f70701dc7e815bb8831d018

  • SHA512

    95a20f02657a87b1ff210be357c065f0eea91626713af2a88b4e48d88807b69e05ce6d1e8f27e5031587adf06097361bdd63b65a754ba6b1c54d3a562c348bc8

  • SSDEEP

    6144:hfAIuZAIuDMVtM/sgHfAIuZAIuDMVtM/sgQ:ZAIuZAIuOBg/AIuZAIuOBgQ

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      004c3831071fc74105f7cbd8c26eb900_NeikiAnalytics.exe

    • Size

      225KB

    • MD5

      004c3831071fc74105f7cbd8c26eb900

    • SHA1

      1f2f019c93d5eaf3695af1a560d602b580ec6bd9

    • SHA256

      50606f4b1a9b7eb260e7019c007570eaf88a6e4b6f70701dc7e815bb8831d018

    • SHA512

      95a20f02657a87b1ff210be357c065f0eea91626713af2a88b4e48d88807b69e05ce6d1e8f27e5031587adf06097361bdd63b65a754ba6b1c54d3a562c348bc8

    • SSDEEP

      6144:hfAIuZAIuDMVtM/sgHfAIuZAIuDMVtM/sgQ:ZAIuZAIuOBg/AIuZAIuOBgQ

    Score
    9/10
    ransomwareupx

    • Renames multiple (3388) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks