Overview

overview

10

Static

static

3

b5893a10b8...KI.exe

windows7-x64

10

b5893a10b8...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5893a10b81f08dc81d6260bb1a62e30_NEIKI

  • Size

    80KB

  • Sample

    240508-dpvrbaff9s

  • MD5

    b5893a10b81f08dc81d6260bb1a62e30

  • SHA1

    c5e7c9c85da7cab25b686be51f622357d39c0125

  • SHA256

    c6dacfaeea046ef94f3cf5431e7bb8782f78c2eac5a6652f62bf00c966206ac6

  • SHA512

    ab740601687ff3b3cbbf3fcd0fd264733db412f90222b0c1a6efa26a0163d07486ac19242d18b96ee1d36c9ebf04ed8c5baa3b75f8d463e3bab4d366a12dc4b2

  • SSDEEP

    1536:v1Tqv4j6qU0mTXCGvg2WR3+ZUxu1nmT/HLd7OTz72LRS5DUHRbPa9b6i+sIk:vFqv4jfU0mTXCsg2WR3+ZUUnmrHLFOnR

Score
10/10
persistence

Malware Config

Targets

    • Target

      b5893a10b81f08dc81d6260bb1a62e30_NEIKI

    • Size

      80KB

    • MD5

      b5893a10b81f08dc81d6260bb1a62e30

    • SHA1

      c5e7c9c85da7cab25b686be51f622357d39c0125

    • SHA256

      c6dacfaeea046ef94f3cf5431e7bb8782f78c2eac5a6652f62bf00c966206ac6

    • SHA512

      ab740601687ff3b3cbbf3fcd0fd264733db412f90222b0c1a6efa26a0163d07486ac19242d18b96ee1d36c9ebf04ed8c5baa3b75f8d463e3bab4d366a12dc4b2

    • SSDEEP

      1536:v1Tqv4j6qU0mTXCGvg2WR3+ZUxu1nmT/HLd7OTz72LRS5DUHRbPa9b6i+sIk:vFqv4jfU0mTXCsg2WR3+ZUUnmrHLFOnR

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks