Overview

overview

10

Static

static

3

d20cf66100...KI.exe

windows7-x64

10

d20cf66100...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d20cf66100dc9d110e1e1abd181efca0_NEIKI

  • Size

    6.2MB

  • Sample

    240508-e8kwwsdf96

  • MD5

    d20cf66100dc9d110e1e1abd181efca0

  • SHA1

    a6c653f8085c01b7c1c771b0dea1856fd82897ad

  • SHA256

    a0a378d627185e24fe8e5aeb68d8024185fc8647ddb5ee653b48f928f02baa33

  • SHA512

    321884dcc6fbebe1322f9fa1508bc052bcbabe8b6a66d26d6acf449ca5ab9f842dd9836ca1d0339c968739e33c915946f3fe6e730f02cdd78aa71511b06c0caa

  • SSDEEP

    196608:A6q0HkQgN1DmfJLO03/Vnaiq2L8dET6WBse0aUCeVMRmLnP9I:A6jCKLO03ZFn846WBsnaiVMRYnC

Score
10/10
persistence

Malware Config

Targets

    • Target

      d20cf66100dc9d110e1e1abd181efca0_NEIKI

    • Size

      6.2MB

    • MD5

      d20cf66100dc9d110e1e1abd181efca0

    • SHA1

      a6c653f8085c01b7c1c771b0dea1856fd82897ad

    • SHA256

      a0a378d627185e24fe8e5aeb68d8024185fc8647ddb5ee653b48f928f02baa33

    • SHA512

      321884dcc6fbebe1322f9fa1508bc052bcbabe8b6a66d26d6acf449ca5ab9f842dd9836ca1d0339c968739e33c915946f3fe6e730f02cdd78aa71511b06c0caa

    • SSDEEP

      196608:A6q0HkQgN1DmfJLO03/Vnaiq2L8dET6WBse0aUCeVMRmLnP9I:A6jCKLO03ZFn846WBsnaiVMRYnC

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks