Overview

overview

9

Static

static

3

5e65aa8a38...cs.exe

windows7-x64

9

5e65aa8a38...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    5e65aa8a381ba11864a17f6732e5e7c0_NeikiAnalytics.exe
  • Size 184KB
  • Sample240613-e28dlsxgkq
  • SHA256 6832f0c0375d75e67fcd799c57a2ce737a36b547b499d8335558e81986fc86ea
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
ransomware

Malware Config

Targets

    • Target
      5e65aa8a381ba11864a17f6732e5e7c0_NeikiAnalytics.exe
    • Size 184KB
    • SHA256 6832f0c0375d75e67fcd799c57a2ce737a36b547b499d8335558e81986fc86ea
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    ransomware

    • Renames multiple (840) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks