Overview

overview

9

Static

static

3

5713be8a49...cs.exe

windows7-x64

9

5713be8a49...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5713be8a49f8704ec926479d5e823da0_NeikiAnalytics.exe

  • Size

    190KB

  • Sample

    240605-q5k82aha6z

  • MD5

    5713be8a49f8704ec926479d5e823da0

  • SHA1

    d1ea6a8318693b1195882a64d138019fcf53e10b

  • SHA256

    1351aac83905f3ea8a63e98e280c04e86cf7f4293a5b6065b0b3b2355ab4013a

  • SHA512

    ab38b2b71e8d761c7a7873a14bd429bd7d957f6c152a83405cd83431c55c84cf3aae82ea2644545c1671f7a5c08cc1d9ce805cb1d51455cbc72b15b0853806e9

  • SSDEEP

    3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEjrWpcOPxPke+e3fFpsJOfFpsJbgE3:tFPxPke+eI2FPxPke+eI3

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5713be8a49f8704ec926479d5e823da0_NeikiAnalytics.exe

    • Size

      190KB

    • MD5

      5713be8a49f8704ec926479d5e823da0

    • SHA1

      d1ea6a8318693b1195882a64d138019fcf53e10b

    • SHA256

      1351aac83905f3ea8a63e98e280c04e86cf7f4293a5b6065b0b3b2355ab4013a

    • SHA512

      ab38b2b71e8d761c7a7873a14bd429bd7d957f6c152a83405cd83431c55c84cf3aae82ea2644545c1671f7a5c08cc1d9ce805cb1d51455cbc72b15b0853806e9

    • SSDEEP

      3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEjrWpcOPxPke+e3fFpsJOfFpsJbgE3:tFPxPke+eI2FPxPke+eI3

    Score
    9/10
    ransomware

    • Renames multiple (3484) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks