Overview

overview

9

Static

static

7

86b0403710...cs.exe

windows7-x64

9

86b0403710...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    86b040371094e9b1bb5b4c23aac01f01e1fbb663f113f0cbe7a6f4515a1be249_NeikiAnalytics.exe

  • Size

    143KB

  • Sample

    240624-spl7hayepa

  • MD5

    fcff66de1a7d51f888d3886c84696650

  • SHA1

    eb1299c4b019f1f52a1a48e520d1df2a36ad0bab

  • SHA256

    86b040371094e9b1bb5b4c23aac01f01e1fbb663f113f0cbe7a6f4515a1be249

  • SHA512

    d9931b9bde9282db3733c0d03742d146e9e610afd0c18358f35d59479592f6c630edd3371cf087296b549a9e4fb37d352601f4c76fd49a86bb503c52dcd670cb

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZF7Zf/FAxTWY1++PJHJXA/OsIZfzc3l:fnyiQSo7ZPnyiQSo7ZI

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      86b040371094e9b1bb5b4c23aac01f01e1fbb663f113f0cbe7a6f4515a1be249_NeikiAnalytics.exe

    • Size

      143KB

    • MD5

      fcff66de1a7d51f888d3886c84696650

    • SHA1

      eb1299c4b019f1f52a1a48e520d1df2a36ad0bab

    • SHA256

      86b040371094e9b1bb5b4c23aac01f01e1fbb663f113f0cbe7a6f4515a1be249

    • SHA512

      d9931b9bde9282db3733c0d03742d146e9e610afd0c18358f35d59479592f6c630edd3371cf087296b549a9e4fb37d352601f4c76fd49a86bb503c52dcd670cb

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZF7Zf/FAxTWY1++PJHJXA/OsIZfzc3l:fnyiQSo7ZPnyiQSo7ZI

    Score
    9/10
    ransomwareupx

    • Renames multiple (4261) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks