Overview

overview

10

Static

static

3

ad2078b33a...KI.exe

windows7-x64

10

ad2078b33a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad2078b33a138591b2544e3f8c25b470_NEIKI

  • Size

    91KB

  • Sample

    240508-c8ezjaha95

  • MD5

    ad2078b33a138591b2544e3f8c25b470

  • SHA1

    833398db020cde99dd4cfa594ed20e047d578ce9

  • SHA256

    f28c4c48d80f2738818870a65d40fb86389864c1d042d0c10f119c68102c2982

  • SHA512

    514b378f1f64bc74594fae6f5b3a9703521de9188e24c7150c1ff76036d7bb4877f0cb9f51197c67b3016d155bbdccfbfb12562cfe810b835d7f19fa499703de

  • SSDEEP

    1536:pEzdWaLmzmmtJ8wjF+pulLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J:pEzddn0ZKulLBsLnVUUHyNwtN4/nEBlX

Score
10/10
persistence

Malware Config

Targets

    • Target

      ad2078b33a138591b2544e3f8c25b470_NEIKI

    • Size

      91KB

    • MD5

      ad2078b33a138591b2544e3f8c25b470

    • SHA1

      833398db020cde99dd4cfa594ed20e047d578ce9

    • SHA256

      f28c4c48d80f2738818870a65d40fb86389864c1d042d0c10f119c68102c2982

    • SHA512

      514b378f1f64bc74594fae6f5b3a9703521de9188e24c7150c1ff76036d7bb4877f0cb9f51197c67b3016d155bbdccfbfb12562cfe810b835d7f19fa499703de

    • SSDEEP

      1536:pEzdWaLmzmmtJ8wjF+pulLBsLnVLdGUHyNwtN4/nLLVaBlEaaaaaadhXd45J:pEzddn0ZKulLBsLnVUUHyNwtN4/nEBlX

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks