Overview

overview

7

Static

static

3

3e074f40d8...KI.exe

windows7-x64

7

3e074f40d8...KI.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e074f40d827377f085ee300a9651680_NEIKI

  • Size

    1.6MB

  • Sample

    240507-1e88aabg96

  • MD5

    3e074f40d827377f085ee300a9651680

  • SHA1

    21ed8623b6a2cfbdd35b0dd7e28f44ffb2eeef6d

  • SHA256

    629beb54e3894b96837176ad7ca5b74b59a8f19671a188b4f43f655561ee6d43

  • SHA512

    38ce0797d04499eb50d2ac679c4b38e0351535c9fc32f55cf6ea1f6112acb69fe7829095948f6eeeaed429b2e9736f435ce83075c1551833c48b61fa9f57e363

  • SSDEEP

    12288:p2U/5PRG+VFQ2xb8z0K+8UDgapLc1J1GrkzCMJVwPkO:gU/5PL58z0f8qpLGJor8wP

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      3e074f40d827377f085ee300a9651680_NEIKI

    • Size

      1.6MB

    • MD5

      3e074f40d827377f085ee300a9651680

    • SHA1

      21ed8623b6a2cfbdd35b0dd7e28f44ffb2eeef6d

    • SHA256

      629beb54e3894b96837176ad7ca5b74b59a8f19671a188b4f43f655561ee6d43

    • SHA512

      38ce0797d04499eb50d2ac679c4b38e0351535c9fc32f55cf6ea1f6112acb69fe7829095948f6eeeaed429b2e9736f435ce83075c1551833c48b61fa9f57e363

    • SSDEEP

      12288:p2U/5PRG+VFQ2xb8z0K+8UDgapLc1J1GrkzCMJVwPkO:gU/5PL58z0f8qpLGJor8wP

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks