Overview

overview

9

Static

static

7

5485f67f15...cs.exe

windows7-x64

9

5485f67f15...cs.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5485f67f15283133393782e1a1d5fd2109b08d82389053806ad97893bbba788d_NeikiAnalytics.exe

  • Size

    48KB

  • Sample

    240701-qcdy9awgrp

  • MD5

    3f56167343ae6f2e027ab4d1587aab90

  • SHA1

    402b08c68e2690023fb98279d1e9acaa3d82f5c9

  • SHA256

    5485f67f15283133393782e1a1d5fd2109b08d82389053806ad97893bbba788d

  • SHA512

    37417a133d73f8cbc17696b917470ded0edeb000ce6fa46ee94ff055a1f865521cd710145e45fdba99d63efd748330cdde7e5c3a059878f7de38ee8eb7f106e1

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzQ:CTWn1++PJHJXA/OsIZfzc3/Q8zxC1AE

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      5485f67f15283133393782e1a1d5fd2109b08d82389053806ad97893bbba788d_NeikiAnalytics.exe

    • Size

      48KB

    • MD5

      3f56167343ae6f2e027ab4d1587aab90

    • SHA1

      402b08c68e2690023fb98279d1e9acaa3d82f5c9

    • SHA256

      5485f67f15283133393782e1a1d5fd2109b08d82389053806ad97893bbba788d

    • SHA512

      37417a133d73f8cbc17696b917470ded0edeb000ce6fa46ee94ff055a1f865521cd710145e45fdba99d63efd748330cdde7e5c3a059878f7de38ee8eb7f106e1

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzQ:CTWn1++PJHJXA/OsIZfzc3/Q8zxC1AE

    Score
    9/10
    ransomwareupx

    • Renames multiple (3451) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks