Overview

overview

10

Static

static

3

d2ea10c423...KI.exe

windows7-x64

10

d2ea10c423...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2ea10c4232a54a1051b79f2663c2cc0_NEIKI

  • Size

    296KB

  • Sample

    240508-e91nqsdg83

  • MD5

    d2ea10c4232a54a1051b79f2663c2cc0

  • SHA1

    4776bef5e702936bb200c56745f92e76b9de1719

  • SHA256

    52db0f3f879b2a1936169fc427b9f235ea4034eaa65fd450e42d6e7ceeef9d97

  • SHA512

    539bd7c1931e4d137ef147800fcee65285b880c26d5733ec76a53a29a3da2a6875a6fa3e7d11b7fbc3ffa2c213c1e33051f785c7a2d9445865fe058a25382c56

  • SSDEEP

    3072:TljZhsJzXTFAid8TT80Oj2DARA1+6NhZ6P0c9fpxg6pg:TnhsJLuidCT7NNPKG6g

Score
10/10
persistence

Malware Config

Targets

    • Target

      d2ea10c4232a54a1051b79f2663c2cc0_NEIKI

    • Size

      296KB

    • MD5

      d2ea10c4232a54a1051b79f2663c2cc0

    • SHA1

      4776bef5e702936bb200c56745f92e76b9de1719

    • SHA256

      52db0f3f879b2a1936169fc427b9f235ea4034eaa65fd450e42d6e7ceeef9d97

    • SHA512

      539bd7c1931e4d137ef147800fcee65285b880c26d5733ec76a53a29a3da2a6875a6fa3e7d11b7fbc3ffa2c213c1e33051f785c7a2d9445865fe058a25382c56

    • SSDEEP

      3072:TljZhsJzXTFAid8TT80Oj2DARA1+6NhZ6P0c9fpxg6pg:TnhsJLuidCT7NNPKG6g

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks