Overview

overview

10

Static

static

3

dc3bfad623...KI.exe

windows7-x64

10

dc3bfad623...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc3bfad623cc143e725dab27f7951db0_NEIKI

  • Size

    704KB

  • Sample

    240508-frn3naeh52

  • MD5

    dc3bfad623cc143e725dab27f7951db0

  • SHA1

    fc3022584f7f2663ff2e3f233a24594f19f77154

  • SHA256

    0c5cd662b4488e9392bfb34ef8b558ccd163cd0032e21ad8f657d5118eed6459

  • SHA512

    67fedde49f432a499acc670382d4f0aff248ae8215e69806f2c1dac529a820de045cd2688262e2e9e53df051a0516aaac7f8dd8045a54b749ffc75b37a78aed6

  • SSDEEP

    12288:huGaph2kkkkK4kXkkkkkkkkl888888888888888888nusMH0QiRLsR4P377a20Rw:huGaph2kkkkK4kXkkkkkkkkhLX3a20Rw

Score
10/10
persistence

Malware Config

Targets

    • Target

      dc3bfad623cc143e725dab27f7951db0_NEIKI

    • Size

      704KB

    • MD5

      dc3bfad623cc143e725dab27f7951db0

    • SHA1

      fc3022584f7f2663ff2e3f233a24594f19f77154

    • SHA256

      0c5cd662b4488e9392bfb34ef8b558ccd163cd0032e21ad8f657d5118eed6459

    • SHA512

      67fedde49f432a499acc670382d4f0aff248ae8215e69806f2c1dac529a820de045cd2688262e2e9e53df051a0516aaac7f8dd8045a54b749ffc75b37a78aed6

    • SSDEEP

      12288:huGaph2kkkkK4kXkkkkkkkkl888888888888888888nusMH0QiRLsR4P377a20Rw:huGaph2kkkkK4kXkkkkkkkkhLX3a20Rw

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks