Overview

overview

9

Static

static

3

39eb998ee4...cs.exe

windows7-x64

9

39eb998ee4...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39eb998ee4b2bdab88b158d2f8371754b880b3dcde6c190f8fd87ae2b5e433a0_NeikiAnalytics.exe

  • Size

    144KB

  • Sample

    240624-ega8dazepp

  • MD5

    f92880c7842b6981c71e072d681d77f0

  • SHA1

    53ddd84a89399984daa462f1ee3ba0d8e164ba1a

  • SHA256

    39eb998ee4b2bdab88b158d2f8371754b880b3dcde6c190f8fd87ae2b5e433a0

  • SHA512

    44217094638848440d7e3be29c517697ad329ba1ca836607eac17bee2d64a49728fa33e68435ef7daede37829dd627d99f1f9f716cbc2c979c07d9e6184b8112

  • SSDEEP

    1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOMETC+cI2Iv7ZhA7pApvOsOKjC0YSilpFpfkC:6e7WpXYvnh3te7WpXYvnh3v

Score
9/10
ransomware

Malware Config

Targets

    • Target

      39eb998ee4b2bdab88b158d2f8371754b880b3dcde6c190f8fd87ae2b5e433a0_NeikiAnalytics.exe

    • Size

      144KB

    • MD5

      f92880c7842b6981c71e072d681d77f0

    • SHA1

      53ddd84a89399984daa462f1ee3ba0d8e164ba1a

    • SHA256

      39eb998ee4b2bdab88b158d2f8371754b880b3dcde6c190f8fd87ae2b5e433a0

    • SHA512

      44217094638848440d7e3be29c517697ad329ba1ca836607eac17bee2d64a49728fa33e68435ef7daede37829dd627d99f1f9f716cbc2c979c07d9e6184b8112

    • SSDEEP

      1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOMETC+cI2Iv7ZhA7pApvOsOKjC0YSilpFpfkC:6e7WpXYvnh3te7WpXYvnh3v

    Score
    9/10
    ransomware

    • Renames multiple (4622) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks