Overview

overview

9

Static

static

3

e34d423cd6...cs.exe

windows7-x64

9

e34d423cd6...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e34d423cd68f80e8e11e64c307b857c0_NeikiAnalytics.exe

  • Size

    89KB

  • Sample

    240616-j3p1wazemj

  • MD5

    e34d423cd68f80e8e11e64c307b857c0

  • SHA1

    fc89ddd081ab87b414370dbf09bcbf1618f167fb

  • SHA256

    46852dc7bc846e22e7b4997024d7876442dc9e9a02b27a0555115346ce2cf6c4

  • SHA512

    73b01d011c841fdea59c8fcdbdc1d2385b0aab3adc00519ca9b7c34dd50300eb8aa95f66755320c29407d7c165b49bd6fbab2db62ef4b5cc1dcf3c87c61b139a

  • SSDEEP

    1536:W7ZNLpApCZuvIYXP7ZNLpApCZuvIYXsW5Wz:6NLWpCZLYdNLWpCZLY8W5Wz

Score
9/10
ransomware

Malware Config

Targets

    • Target

      e34d423cd68f80e8e11e64c307b857c0_NeikiAnalytics.exe

    • Size

      89KB

    • MD5

      e34d423cd68f80e8e11e64c307b857c0

    • SHA1

      fc89ddd081ab87b414370dbf09bcbf1618f167fb

    • SHA256

      46852dc7bc846e22e7b4997024d7876442dc9e9a02b27a0555115346ce2cf6c4

    • SHA512

      73b01d011c841fdea59c8fcdbdc1d2385b0aab3adc00519ca9b7c34dd50300eb8aa95f66755320c29407d7c165b49bd6fbab2db62ef4b5cc1dcf3c87c61b139a

    • SSDEEP

      1536:W7ZNLpApCZuvIYXP7ZNLpApCZuvIYXsW5Wz:6NLWpCZLYdNLWpCZLY8W5Wz

    Score
    9/10
    ransomware

    • Renames multiple (4818) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks