Overview

overview

9

Static

static

3

10bcdb3d08...cs.exe

windows7-x64

9

10bcdb3d08...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10bcdb3d0861b5a8065f770211563de0_NeikiAnalytics.exe

  • Size

    195KB

  • Sample

    240606-n7bq9sdh3x

  • MD5

    10bcdb3d0861b5a8065f770211563de0

  • SHA1

    31deee4b5db49cdca5454f84ef92d002d9a5cb51

  • SHA256

    b2d948032f2a940661fb736ed85a8b899a862699f72cca0ada4b56b01f1331ef

  • SHA512

    1ec7f7cf2ff07a9c5c9db8a86d048f88b881b125d463d3bc8b0191678910495aaf95a8f1e0263086670e6fb5612d616abd867ce7a2f1715033161ae70fd4f99c

  • SSDEEP

    6144:RqKvb0CYJ973e+eKZWaa1aaJqKvb0CYJ973e+eKZWaa1aaq:vvbxYX7ZWaa1aaHvbxYX7ZWaa1aaq

Score
9/10
ransomware

Malware Config

Targets

    • Target

      10bcdb3d0861b5a8065f770211563de0_NeikiAnalytics.exe

    • Size

      195KB

    • MD5

      10bcdb3d0861b5a8065f770211563de0

    • SHA1

      31deee4b5db49cdca5454f84ef92d002d9a5cb51

    • SHA256

      b2d948032f2a940661fb736ed85a8b899a862699f72cca0ada4b56b01f1331ef

    • SHA512

      1ec7f7cf2ff07a9c5c9db8a86d048f88b881b125d463d3bc8b0191678910495aaf95a8f1e0263086670e6fb5612d616abd867ce7a2f1715033161ae70fd4f99c

    • SSDEEP

      6144:RqKvb0CYJ973e+eKZWaa1aaJqKvb0CYJ973e+eKZWaa1aaq:vvbxYX7ZWaa1aaHvbxYX7ZWaa1aaq

    Score
    9/10
    ransomware

    • Renames multiple (3998) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks