Overview

overview

9

Static

static

3

0e11199c78...cs.exe

windows7-x64

9

0e11199c78...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e11199c78968885dfee193ee30fd700_NeikiAnalytics.exe

  • Size

    184KB

  • Sample

    240611-3sp3nswdmd

  • MD5

    0e11199c78968885dfee193ee30fd700

  • SHA1

    93d6ba588cf3749323054fcf48eabf87cb738037

  • SHA256

    7793fe1a98fb25e6f58fbfff0d7465fee170ed03e6c573aa812304c0d7f10a5c

  • SHA512

    9e18ecd6877603c05c500f091ffe696bc1fd4dacb015566d544061e8d5b52c1561adb5a963adafac4709c48624f12850bdda415180675c8b60513b7f3069debe

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXaYe7WpMaxeb0CYJ97lEYNR73e+eKZ0VXY:RqKvb0CYJ973e+eKZ0VcqKvb0CYJ9731

Score
9/10
ransomware

Malware Config

Targets

    • Target

      0e11199c78968885dfee193ee30fd700_NeikiAnalytics.exe

    • Size

      184KB

    • MD5

      0e11199c78968885dfee193ee30fd700

    • SHA1

      93d6ba588cf3749323054fcf48eabf87cb738037

    • SHA256

      7793fe1a98fb25e6f58fbfff0d7465fee170ed03e6c573aa812304c0d7f10a5c

    • SHA512

      9e18ecd6877603c05c500f091ffe696bc1fd4dacb015566d544061e8d5b52c1561adb5a963adafac4709c48624f12850bdda415180675c8b60513b7f3069debe

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXaYe7WpMaxeb0CYJ97lEYNR73e+eKZ0VXY:RqKvb0CYJ973e+eKZ0VcqKvb0CYJ9731

    Score
    9/10
    ransomware

    • Renames multiple (4216) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks