Overview

overview

9

Static

static

7

5b5f897077...cs.exe

windows7-x64

9

5b5f897077...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b5f89707731cd9f40f6551d13d88760_NeikiAnalytics.exe

  • Size

    118KB

  • Sample

    240613-d666nsshnc

  • MD5

    5b5f89707731cd9f40f6551d13d88760

  • SHA1

    463d91e4083009f6805ad67704f57bbc19f05756

  • SHA256

    444c6a7129c40efd1d3b4e8383b5250dbe631d9fd45485e447754d23e588d3c8

  • SHA512

    9731a92d35289a3dbde4978ad6b5c05976856bf0329a8d8786f2328c0a9e8631004bacd0a10d4e1838ff5b42c56764908e2e574ff53737996bb88d273bc81925

  • SSDEEP

    3072:KQSohsUsxe+erZs1o8k1o8dQSohsUsxe+erZs1o8k1o8H:KQSohsUsxe+eVQSohsUsxe+e/

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      5b5f89707731cd9f40f6551d13d88760_NeikiAnalytics.exe

    • Size

      118KB

    • MD5

      5b5f89707731cd9f40f6551d13d88760

    • SHA1

      463d91e4083009f6805ad67704f57bbc19f05756

    • SHA256

      444c6a7129c40efd1d3b4e8383b5250dbe631d9fd45485e447754d23e588d3c8

    • SHA512

      9731a92d35289a3dbde4978ad6b5c05976856bf0329a8d8786f2328c0a9e8631004bacd0a10d4e1838ff5b42c56764908e2e574ff53737996bb88d273bc81925

    • SSDEEP

      3072:KQSohsUsxe+erZs1o8k1o8dQSohsUsxe+erZs1o8k1o8H:KQSohsUsxe+eVQSohsUsxe+e/

    Score
    9/10
    ransomwareupx

    • Renames multiple (5016) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks