Overview

overview

9

Static

static

3

349dfd45eb...cs.exe

windows7-x64

9

349dfd45eb...cs.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    349dfd45eb436cedb61a0c7a42d2292a29441b31e6dd54bee1f1879183ee406e_NeikiAnalytics.exe

  • Size

    98KB

  • Sample

    240701-evbfasyhpl

  • MD5

    aa3adbc68bb23df78a3f1eb25e75a470

  • SHA1

    0adf5cc8e9d203f835ed2b318e998832b9e280cb

  • SHA256

    349dfd45eb436cedb61a0c7a42d2292a29441b31e6dd54bee1f1879183ee406e

  • SHA512

    73b0da6bf334be5802baf00ab6a4be6f2e3dd713f3022659154787a8f9051be4d302322b8dfe8ce6e681bfea9624e7455ab0e697e33972898dd33b2af954d43a

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7fOw2wSBr:RqKvb0CYJ973e+eKZOf7fa

Score
9/10
ransomware

Malware Config

Targets

    • Target

      349dfd45eb436cedb61a0c7a42d2292a29441b31e6dd54bee1f1879183ee406e_NeikiAnalytics.exe

    • Size

      98KB

    • MD5

      aa3adbc68bb23df78a3f1eb25e75a470

    • SHA1

      0adf5cc8e9d203f835ed2b318e998832b9e280cb

    • SHA256

      349dfd45eb436cedb61a0c7a42d2292a29441b31e6dd54bee1f1879183ee406e

    • SHA512

      73b0da6bf334be5802baf00ab6a4be6f2e3dd713f3022659154787a8f9051be4d302322b8dfe8ce6e681bfea9624e7455ab0e697e33972898dd33b2af954d43a

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7fOw2wSBr:RqKvb0CYJ973e+eKZOf7fa

    Score
    9/10
    ransomware

    • Renames multiple (2655) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks