Overview

overview

9

Static

static

3

25f24ef237...cs.exe

windows7-x64

9

25f24ef237...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25f24ef2378c7324383432b997619300_NeikiAnalytics.exe

  • Size

    69KB

  • Sample

    240611-dyh4wasdma

  • MD5

    25f24ef2378c7324383432b997619300

  • SHA1

    20e671e3f332e34b706689fd0df0488d8d5642e2

  • SHA256

    86ab9534cbe7ee01628730f79487e087ad701d54bbdc177a667c55c8eb146ab2

  • SHA512

    499beab5565e32e4b398572cc3e27aec23fe367de17adb19f63f2ffbbb99a467170f02a20484c66ac77766cde374482e3affe14a05cb49a6a84a0f5e4ada3b5a

  • SSDEEP

    384:GBt7Br5xjL9AgA71FbhvuNBNQFTBt7Br5xjL9AgA71FbhvuNBNQF3wBBgwBBZ:W7BlpppARFbhHF37BlpppARFbhHFs

Score
9/10
ransomware

Malware Config

Targets

    • Target

      25f24ef2378c7324383432b997619300_NeikiAnalytics.exe

    • Size

      69KB

    • MD5

      25f24ef2378c7324383432b997619300

    • SHA1

      20e671e3f332e34b706689fd0df0488d8d5642e2

    • SHA256

      86ab9534cbe7ee01628730f79487e087ad701d54bbdc177a667c55c8eb146ab2

    • SHA512

      499beab5565e32e4b398572cc3e27aec23fe367de17adb19f63f2ffbbb99a467170f02a20484c66ac77766cde374482e3affe14a05cb49a6a84a0f5e4ada3b5a

    • SSDEEP

      384:GBt7Br5xjL9AgA71FbhvuNBNQFTBt7Br5xjL9AgA71FbhvuNBNQF3wBBgwBBZ:W7BlpppARFbhHF37BlpppARFbhHFs

    Score
    9/10
    ransomware

    • Renames multiple (3879) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks