Overview

overview

10

Static

static

3

f68085e8c9...KI.exe

windows7-x64

10

f68085e8c9...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f68085e8c9e45ef674d7956d4ed42cd0_NEIKI

  • Size

    187KB

  • Sample

    240508-g7l4nsfb5v

  • MD5

    f68085e8c9e45ef674d7956d4ed42cd0

  • SHA1

    2bd69aef5fc10dad6b3124f656d0651bf235cd86

  • SHA256

    a55c0e44c0dd72cfe630127208ebb89874ba986a679cdaa3080f387545ce5cd0

  • SHA512

    327b44eda40b9dcf958153ca78e6bd4110d9d36fe501e998564c669e9ef880f51db683363b4d05d58e22e13a00cca452d3b919c1e8f41f548cf30fdbcde915e0

  • SSDEEP

    3072:MX2ddqZbt9RxUY5m+GH/hhvsFwVgtRQ2c+tlB5xpWJLM77OkeCK2+hDueH:MGdk9EZHvCwV+tbFOLM77OLLt

Score
10/10
persistence

Malware Config

Targets

    • Target

      f68085e8c9e45ef674d7956d4ed42cd0_NEIKI

    • Size

      187KB

    • MD5

      f68085e8c9e45ef674d7956d4ed42cd0

    • SHA1

      2bd69aef5fc10dad6b3124f656d0651bf235cd86

    • SHA256

      a55c0e44c0dd72cfe630127208ebb89874ba986a679cdaa3080f387545ce5cd0

    • SHA512

      327b44eda40b9dcf958153ca78e6bd4110d9d36fe501e998564c669e9ef880f51db683363b4d05d58e22e13a00cca452d3b919c1e8f41f548cf30fdbcde915e0

    • SSDEEP

      3072:MX2ddqZbt9RxUY5m+GH/hhvsFwVgtRQ2c+tlB5xpWJLM77OkeCK2+hDueH:MGdk9EZHvCwV+tbFOLM77OLLt

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks