Overview

overview

9

Static

static

7

47fa87a80f...cs.exe

windows7-x64

9

47fa87a80f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47fa87a80f58c616ec0f7d8bb3ca905d9b788eeab797d715db8bf2dfd188800d_NeikiAnalytics.exe

  • Size

    1.8MB

  • Sample

    240620-jvjtwsxblb

  • MD5

    69a7c18e05a0b49ffb3a6fbc4c9ceac0

  • SHA1

    29a612312ee8ff3e505883f01fcddd3d136db5c2

  • SHA256

    47fa87a80f58c616ec0f7d8bb3ca905d9b788eeab797d715db8bf2dfd188800d

  • SHA512

    799b4fcfe575d778240a1a8e8264fafe2f96a0384c80b7db038e44f5faeb345f329871f952d69173b81e30a32d613cdf1c3ee44ae00e35d1d43d73d7abff770e

  • SSDEEP

    12288:VQt8GwtIR0XEybX/aqvHIzckUPPyiwRoVGwhGARqOO:VIzjR0Uy7/XIzck0PzweFhGuqOO

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      47fa87a80f58c616ec0f7d8bb3ca905d9b788eeab797d715db8bf2dfd188800d_NeikiAnalytics.exe

    • Size

      1.8MB

    • MD5

      69a7c18e05a0b49ffb3a6fbc4c9ceac0

    • SHA1

      29a612312ee8ff3e505883f01fcddd3d136db5c2

    • SHA256

      47fa87a80f58c616ec0f7d8bb3ca905d9b788eeab797d715db8bf2dfd188800d

    • SHA512

      799b4fcfe575d778240a1a8e8264fafe2f96a0384c80b7db038e44f5faeb345f329871f952d69173b81e30a32d613cdf1c3ee44ae00e35d1d43d73d7abff770e

    • SSDEEP

      12288:VQt8GwtIR0XEybX/aqvHIzckUPPyiwRoVGwhGARqOO:VIzjR0Uy7/XIzck0PzweFhGuqOO

    Score
    9/10
    ransomwareupx

    • Renames multiple (371) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks