Overview

overview

9

Static

static

3

30a7dac392...cs.exe

windows7-x64

9

30a7dac392...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    30a7dac39276748aae12736d87760970_NeikiAnalytics.exe
  • Size 189KB
  • Sample240611-lvr7datamr
  • SHA256 677c94efbffe5a7fd7ede0b814e9a1ce83b9b12bda9255b990c42f6207f29fac
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
ransomware

Malware Config

Targets

    • Target
      30a7dac39276748aae12736d87760970_NeikiAnalytics.exe
    • Size 189KB
    • SHA256 677c94efbffe5a7fd7ede0b814e9a1ce83b9b12bda9255b990c42f6207f29fac
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    ransomware

    • Renames multiple (3753) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks