Overview

overview

9

Static

static

3

3386bc51d5...cs.exe

windows7-x64

9

3386bc51d5...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3386bc51d56d3b1efac1c47959f47b5ad853e92e049d098bd116de4a99a8accb_NeikiAnalytics.exe

  • Size

    83KB

  • Sample

    240701-ehvy6swaja

  • MD5

    77773cb744ef106244a2949fb0648a90

  • SHA1

    2c496ba644abdea863872c61780c919fb1fe3b00

  • SHA256

    3386bc51d56d3b1efac1c47959f47b5ad853e92e049d098bd116de4a99a8accb

  • SHA512

    eb29143649186fde75cf02caa66da1c32cfc989df437f7d9d70a6423830b23b4c3205635273fcbcce406bdc720d563160df999f56663a75f8ad8507445409cbf

  • SSDEEP

    1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBK2LUO:69WpQE0zUO

Score
9/10
ransomware

Malware Config

Targets

    • Target

      3386bc51d56d3b1efac1c47959f47b5ad853e92e049d098bd116de4a99a8accb_NeikiAnalytics.exe

    • Size

      83KB

    • MD5

      77773cb744ef106244a2949fb0648a90

    • SHA1

      2c496ba644abdea863872c61780c919fb1fe3b00

    • SHA256

      3386bc51d56d3b1efac1c47959f47b5ad853e92e049d098bd116de4a99a8accb

    • SHA512

      eb29143649186fde75cf02caa66da1c32cfc989df437f7d9d70a6423830b23b4c3205635273fcbcce406bdc720d563160df999f56663a75f8ad8507445409cbf

    • SSDEEP

      1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBK2LUO:69WpQE0zUO

    Score
    9/10
    ransomware

    • Renames multiple (2851) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks