Overview

overview

9

Static

static

7

31c459797b...cs.exe

windows7-x64

9

31c459797b...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    31c459797b05cd146706a8ef0ce1b5a0_NeikiAnalytics.exe
  • Size 161KB
  • Sample240611-mj478stdmh
  • SHA256 23c04fdc56081e48bb149c1d7174605d43a0b9612c075422e6800ec65d4f975e
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
ransomwareupx

Malware Config

Targets

    • Target
      31c459797b05cd146706a8ef0ce1b5a0_NeikiAnalytics.exe
    • Size 161KB
    • SHA256 23c04fdc56081e48bb149c1d7174605d43a0b9612c075422e6800ec65d4f975e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    ransomwareupx

    • Renames multiple (5685) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks