Overview

overview

10

Static

static

3

199e6859bf...KI.exe

windows7-x64

10

199e6859bf...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    199e6859bf1765a02fea3ad5a75fbaa0_NEIKI

  • Size

    64KB

  • Sample

    240507-ypgjxaff32

  • MD5

    199e6859bf1765a02fea3ad5a75fbaa0

  • SHA1

    b20be60df7d2873c751c076a352b2a76bbfc1dae

  • SHA256

    378347a31485e4a38d1287f825d3ed902ce57c5ee58652eecba0dae7e57bec14

  • SHA512

    4899f413542c80c3a93a82fd1c0fba182bd65526d3cbb6d2a45a66c04765ad5887370a58b531ad076410c4363f5ed5d581a58af271c3c251323117e709d43e49

  • SSDEEP

    1536:U64WbHPVac5EUq0L/wttdFYq2c5rpiQgNtn:UzWbtac5JjWOFc5rEQgL

Score
10/10
persistence

Malware Config

Targets

    • Target

      199e6859bf1765a02fea3ad5a75fbaa0_NEIKI

    • Size

      64KB

    • MD5

      199e6859bf1765a02fea3ad5a75fbaa0

    • SHA1

      b20be60df7d2873c751c076a352b2a76bbfc1dae

    • SHA256

      378347a31485e4a38d1287f825d3ed902ce57c5ee58652eecba0dae7e57bec14

    • SHA512

      4899f413542c80c3a93a82fd1c0fba182bd65526d3cbb6d2a45a66c04765ad5887370a58b531ad076410c4363f5ed5d581a58af271c3c251323117e709d43e49

    • SSDEEP

      1536:U64WbHPVac5EUq0L/wttdFYq2c5rpiQgNtn:UzWbtac5JjWOFc5rEQgL

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks