Overview

overview

9

Static

static

7

d061593923...cs.exe

windows7-x64

9

d061593923...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d061593923c8cbdb33cbf4e795d1c9c0_NeikiAnalytics.exe

  • Size

    60KB

  • Sample

    240616-dnnava1dpl

  • MD5

    d061593923c8cbdb33cbf4e795d1c9c0

  • SHA1

    0af6b3215131e205f904372fb92f07865721a855

  • SHA256

    738d0d9c00849118a506d7fdb8723329b7d7c8b06281e20bf9ed94137d26b2b1

  • SHA512

    44957d3770d69d55e7dd04e74245c671e717ae1a7f9bdda2ba320ad82939a3447272abf96629dd8e7e1fcaa48efc69b9cfc962497219762aec7a6dc7e5bb8b1e

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJOLKgyKze+yKzed:KQSohsUsUKfKzWKz4

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      d061593923c8cbdb33cbf4e795d1c9c0_NeikiAnalytics.exe

    • Size

      60KB

    • MD5

      d061593923c8cbdb33cbf4e795d1c9c0

    • SHA1

      0af6b3215131e205f904372fb92f07865721a855

    • SHA256

      738d0d9c00849118a506d7fdb8723329b7d7c8b06281e20bf9ed94137d26b2b1

    • SHA512

      44957d3770d69d55e7dd04e74245c671e717ae1a7f9bdda2ba320ad82939a3447272abf96629dd8e7e1fcaa48efc69b9cfc962497219762aec7a6dc7e5bb8b1e

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsJOLKgyKze+yKzed:KQSohsUsUKfKzWKz4

    Score
    9/10
    ransomwareupx

    • Renames multiple (3741) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks