Overview

overview

9

Static

static

3

3f8a008edf...cs.exe

windows7-x64

9

3f8a008edf...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f8a008edf3db3dbcf44805d4bed85e9cb3e32d4da6a25a6c8a56b5b3b5b4684_NeikiAnalytics.exe

  • Size

    187KB

  • Sample

    240627-3mg5wa1fjr

  • MD5

    7a6b7cbf9e111512cf537e2b7e97dd90

  • SHA1

    c63053ca2cccd139679f2002ebe5c68b8fc3b9f1

  • SHA256

    3f8a008edf3db3dbcf44805d4bed85e9cb3e32d4da6a25a6c8a56b5b3b5b4684

  • SHA512

    8d919f9cc8099c7c33b0fa1c59e873af8557a9f2b35e684747a961f14ec5f0403e26b8a72a1786e50f0f449681d0ecd3609eeb81a51eb5bb00f6668985875ca3

  • SSDEEP

    3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBX:PqFF2Ie+eFmqFF2Ie+eFz

Score
9/10
ransomware

Malware Config

Targets

    • Target

      3f8a008edf3db3dbcf44805d4bed85e9cb3e32d4da6a25a6c8a56b5b3b5b4684_NeikiAnalytics.exe

    • Size

      187KB

    • MD5

      7a6b7cbf9e111512cf537e2b7e97dd90

    • SHA1

      c63053ca2cccd139679f2002ebe5c68b8fc3b9f1

    • SHA256

      3f8a008edf3db3dbcf44805d4bed85e9cb3e32d4da6a25a6c8a56b5b3b5b4684

    • SHA512

      8d919f9cc8099c7c33b0fa1c59e873af8557a9f2b35e684747a961f14ec5f0403e26b8a72a1786e50f0f449681d0ecd3609eeb81a51eb5bb00f6668985875ca3

    • SSDEEP

      3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBX:PqFF2Ie+eFmqFF2Ie+eFz

    Score
    9/10
    ransomware

    • Renames multiple (4446) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks