Overview

overview

9

Static

static

7

698edef15f...cs.exe

windows7-x64

9

698edef15f...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    698edef15f289836058bc7ca818ffcdf4e18aa462f04de196a6920b7f13625dd_NeikiAnalytics.exe

  • Size

    101KB

  • Sample

    240628-c4mtkszarn

  • MD5

    1bcfea65c9b53d083b1e3307053d9a00

  • SHA1

    2642cd7aa28627fff19ab48efba94a45d38c055f

  • SHA256

    698edef15f289836058bc7ca818ffcdf4e18aa462f04de196a6920b7f13625dd

  • SHA512

    021ddac07db994cb5386cebc9346c3653351d7983f44598fea9daaf3a015f0f1e5e6a7441b15a3beafa3c99d5e26daa9e277eb64c32ca470e28cbd204cb7dc77

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8OySU8TWn1++PJHJXA/OsIZfzc3/Q8OySUn:KQSonySUcQSonySUn

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      698edef15f289836058bc7ca818ffcdf4e18aa462f04de196a6920b7f13625dd_NeikiAnalytics.exe

    • Size

      101KB

    • MD5

      1bcfea65c9b53d083b1e3307053d9a00

    • SHA1

      2642cd7aa28627fff19ab48efba94a45d38c055f

    • SHA256

      698edef15f289836058bc7ca818ffcdf4e18aa462f04de196a6920b7f13625dd

    • SHA512

      021ddac07db994cb5386cebc9346c3653351d7983f44598fea9daaf3a015f0f1e5e6a7441b15a3beafa3c99d5e26daa9e277eb64c32ca470e28cbd204cb7dc77

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8OySU8TWn1++PJHJXA/OsIZfzc3/Q8OySUn:KQSonySUcQSonySUn

    Score
    9/10
    ransomwareupx

    • Renames multiple (4835) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks