Overview

overview

9

Static

static

3

2d0839f6b4...cs.exe

windows7-x64

9

2d0839f6b4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d0839f6b407526b2ae9a4109cbe1e20_NeikiAnalytics.exe

  • Size

    85KB

  • Sample

    240612-ktlsjawgrn

  • MD5

    2d0839f6b407526b2ae9a4109cbe1e20

  • SHA1

    91638ad5452c3c61268238470bec423000583b8a

  • SHA256

    3c81a9fe3c23870cc03d070238678c46ef24800e099da5067cbe7c2aaa20f5ea

  • SHA512

    b0cef19db465777b8ec489553ed1cedba951ed14e0686c0b3cdd1215fc9a1a4ab617ec1e2a5cb02abd83fccbfc6036e2b1ab5f8c2a327993092913ac192530fa

  • SSDEEP

    1536:W7ZNLpApCZuvIYXr7ZNLpApCZuvIYX7XgX0:6NLWpCZLYZNLWpCZLYLXgX0

Score
9/10
ransomware

Malware Config

Targets

    • Target

      2d0839f6b407526b2ae9a4109cbe1e20_NeikiAnalytics.exe

    • Size

      85KB

    • MD5

      2d0839f6b407526b2ae9a4109cbe1e20

    • SHA1

      91638ad5452c3c61268238470bec423000583b8a

    • SHA256

      3c81a9fe3c23870cc03d070238678c46ef24800e099da5067cbe7c2aaa20f5ea

    • SHA512

      b0cef19db465777b8ec489553ed1cedba951ed14e0686c0b3cdd1215fc9a1a4ab617ec1e2a5cb02abd83fccbfc6036e2b1ab5f8c2a327993092913ac192530fa

    • SSDEEP

      1536:W7ZNLpApCZuvIYXr7ZNLpApCZuvIYX7XgX0:6NLWpCZLYZNLWpCZLYLXgX0

    Score
    9/10
    ransomware

    • Renames multiple (4839) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks