Overview

overview

9

Static

static

7

9861df6b0d...cs.exe

windows7-x64

9

9861df6b0d...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9861df6b0df9463bc589777c9f4a649cbf40b35662067f5db119a2a58995232d_NeikiAnalytics.exe

  • Size

    311KB

  • Sample

    240628-pw3ahssgkk

  • MD5

    faacd6633990edabc142ae62c9d61de0

  • SHA1

    f13a63064da04c46b316392db7c3ad95ee6e18e6

  • SHA256

    9861df6b0df9463bc589777c9f4a649cbf40b35662067f5db119a2a58995232d

  • SHA512

    49798820425fa295e99f3f6fa40558d3c215bd92dec5641eef2f97e604dd4fbe490c70ad44dbbca2565a816662ee97ce936c17f26b4f2a5e99e62009fa7d68d9

  • SSDEEP

    3072:enaypQSo6VEio5Ua4N1naypQSo6VEio5Ua4Nl:wHpQSo2Eio5UNHpQSo2Eio5Uh

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      9861df6b0df9463bc589777c9f4a649cbf40b35662067f5db119a2a58995232d_NeikiAnalytics.exe

    • Size

      311KB

    • MD5

      faacd6633990edabc142ae62c9d61de0

    • SHA1

      f13a63064da04c46b316392db7c3ad95ee6e18e6

    • SHA256

      9861df6b0df9463bc589777c9f4a649cbf40b35662067f5db119a2a58995232d

    • SHA512

      49798820425fa295e99f3f6fa40558d3c215bd92dec5641eef2f97e604dd4fbe490c70ad44dbbca2565a816662ee97ce936c17f26b4f2a5e99e62009fa7d68d9

    • SSDEEP

      3072:enaypQSo6VEio5Ua4N1naypQSo6VEio5Ua4Nl:wHpQSo2Eio5UNHpQSo2Eio5Uh

    Score
    9/10
    ransomwareupx

    • Renames multiple (4292) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks