Overview

overview

9

Static

static

3

2bfe41b39a...cs.exe

windows7-x64

9

2bfe41b39a...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bfe41b39ab374711d7c5a391b0f512e08be99ee2864b2b4da3a04930e28cd27_NeikiAnalytics.exe

  • Size

    154KB

  • Sample

    240628-2xstpavame

  • MD5

    566bb114057f4ea97caaf07e96961360

  • SHA1

    205ed5d07fe465c9215d3dfb2adae7999753412f

  • SHA256

    2bfe41b39ab374711d7c5a391b0f512e08be99ee2864b2b4da3a04930e28cd27

  • SHA512

    47d0c841741f962fa2783baaf0541288ca4363ee369dbe73cd6216eb755411decfa50cf5233d9724949faf954a279f124a73213e91968b43f4635f7b84307c26

  • SSDEEP

    3072:9QWpze+eJfFpsJOfFpsJ0rDr9QWpze+eJfFpsJOfFpsJ0rDrGl2l7:Lpe+eBpe+eM0d

Score
9/10
ransomware

Malware Config

Targets

    • Target

      2bfe41b39ab374711d7c5a391b0f512e08be99ee2864b2b4da3a04930e28cd27_NeikiAnalytics.exe

    • Size

      154KB

    • MD5

      566bb114057f4ea97caaf07e96961360

    • SHA1

      205ed5d07fe465c9215d3dfb2adae7999753412f

    • SHA256

      2bfe41b39ab374711d7c5a391b0f512e08be99ee2864b2b4da3a04930e28cd27

    • SHA512

      47d0c841741f962fa2783baaf0541288ca4363ee369dbe73cd6216eb755411decfa50cf5233d9724949faf954a279f124a73213e91968b43f4635f7b84307c26

    • SSDEEP

      3072:9QWpze+eJfFpsJOfFpsJ0rDr9QWpze+eJfFpsJOfFpsJ0rDrGl2l7:Lpe+eBpe+eM0d

    Score
    9/10
    ransomware

    • Renames multiple (737) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks