Overview

overview

9

Static

static

3

35f3ca8799...cs.exe

windows7-x64

9

35f3ca8799...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35f3ca87995994cfdf1c5337ff83e13a4e37d71bf5397680a258fdd5b96bb38e_NeikiAnalytics.exe

  • Size

    101KB

  • Sample

    240625-gb57nsweql

  • MD5

    c823c05c952634379f1df3a79eb3b570

  • SHA1

    8fb8966951fe6a0acaa0c092b05df8df0fa548d2

  • SHA256

    35f3ca87995994cfdf1c5337ff83e13a4e37d71bf5397680a258fdd5b96bb38e

  • SHA512

    0e51751cfc584569067137306cd48bde0718c631b8fb31339b3416baf3c2161ad112fb7a7e559411669c23a659b578b491c7360ae84e898c1ea9c3dc4cd25b66

  • SSDEEP

    768:W7BlpppARFbhWJgQZpGeelwel6pa7BlpppARFbhWJgQZpGeelwel6p2XgXJ:W7ZppApAT9M7ZppApAT90XgXJ

Score
9/10
ransomware

Malware Config

Targets

    • Target

      35f3ca87995994cfdf1c5337ff83e13a4e37d71bf5397680a258fdd5b96bb38e_NeikiAnalytics.exe

    • Size

      101KB

    • MD5

      c823c05c952634379f1df3a79eb3b570

    • SHA1

      8fb8966951fe6a0acaa0c092b05df8df0fa548d2

    • SHA256

      35f3ca87995994cfdf1c5337ff83e13a4e37d71bf5397680a258fdd5b96bb38e

    • SHA512

      0e51751cfc584569067137306cd48bde0718c631b8fb31339b3416baf3c2161ad112fb7a7e559411669c23a659b578b491c7360ae84e898c1ea9c3dc4cd25b66

    • SSDEEP

      768:W7BlpppARFbhWJgQZpGeelwel6pa7BlpppARFbhWJgQZpGeelwel6p2XgXJ:W7ZppApAT9M7ZppApAT90XgXJ

    Score
    9/10
    ransomware

    • Renames multiple (4815) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks