Overview

overview

9

Static

static

3

5de96bbb20...cs.exe

windows7-x64

9

5de96bbb20...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5de96bbb206a0239565f4d9035a0a7efee9d5f122e026f46086a2a4b82537fb5_NeikiAnalytics.exe

  • Size

    36KB

  • Sample

    240629-ehjk5szglf

  • MD5

    3c27f1487913f9c56ea60104c75c9800

  • SHA1

    cc311950076531fd81427b5b742b2d523263b5da

  • SHA256

    5de96bbb206a0239565f4d9035a0a7efee9d5f122e026f46086a2a4b82537fb5

  • SHA512

    9cea51dc9eda973f2b251648867ca7ce5fae7765663378b0ca41fad9a68d9fa9623cd5ea710989158a2b120eb85ead4d6a443fa3a07d14d26d3c3e6d65dc257b

  • SSDEEP

    384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrq91c+1:W7BlpppARFbhknrAc+1

Score
9/10
ransomware

Malware Config

Targets

    • Target

      5de96bbb206a0239565f4d9035a0a7efee9d5f122e026f46086a2a4b82537fb5_NeikiAnalytics.exe

    • Size

      36KB

    • MD5

      3c27f1487913f9c56ea60104c75c9800

    • SHA1

      cc311950076531fd81427b5b742b2d523263b5da

    • SHA256

      5de96bbb206a0239565f4d9035a0a7efee9d5f122e026f46086a2a4b82537fb5

    • SHA512

      9cea51dc9eda973f2b251648867ca7ce5fae7765663378b0ca41fad9a68d9fa9623cd5ea710989158a2b120eb85ead4d6a443fa3a07d14d26d3c3e6d65dc257b

    • SSDEEP

      384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrq91c+1:W7BlpppARFbhknrAc+1

    Score
    9/10
    ransomware

    • Renames multiple (1344) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks