Overview

overview

9

Static

static

7

7d64c9c7d4...cs.exe

windows7-x64

9

7d64c9c7d4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7d64c9c7d46556d777db3251ccfcdb40_NeikiAnalytics.exe

  • Size

    60KB

  • Sample

    240604-nf56sseh65

  • MD5

    7d64c9c7d46556d777db3251ccfcdb40

  • SHA1

    534f37e88132579ebb6e8d602fee00776c884663

  • SHA256

    9a2deb36df20e806c070d529f4a0c74610235fcb763b4d80003ec2241b59e81f

  • SHA512

    a814e05d28af7a95759dd591fd9869d9aad8b467f4493138f78015ee5eb2fc1b98cb80d13d9b2495c021f00bdf2edcf6d4db730c07a2285d766191bfb9b072cd

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8yi+y5gfcL5y5gfcLg:KQSoEqeaqeg

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      7d64c9c7d46556d777db3251ccfcdb40_NeikiAnalytics.exe

    • Size

      60KB

    • MD5

      7d64c9c7d46556d777db3251ccfcdb40

    • SHA1

      534f37e88132579ebb6e8d602fee00776c884663

    • SHA256

      9a2deb36df20e806c070d529f4a0c74610235fcb763b4d80003ec2241b59e81f

    • SHA512

      a814e05d28af7a95759dd591fd9869d9aad8b467f4493138f78015ee5eb2fc1b98cb80d13d9b2495c021f00bdf2edcf6d4db730c07a2285d766191bfb9b072cd

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8yi+y5gfcL5y5gfcLg:KQSoEqeaqeg

    Score
    9/10
    ransomwareupx

    • Renames multiple (3707) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks