Overview

overview

10

Static

static

3

039b6140b1...KI.exe

windows7-x64

10

039b6140b1...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    039b6140b10789aad213bb81f01ce520_NEIKI

  • Size

    111KB

  • Sample

    240508-h2banabb86

  • MD5

    039b6140b10789aad213bb81f01ce520

  • SHA1

    ae5b76e91d5c24b066e5408b37fbac3cf0b426a6

  • SHA256

    fa98f3058719c37b105edf35226c00cba202f35bc894e7b96fa8b56aa2354e79

  • SHA512

    effd47117744384d700964acdaa5a10f4f838829abb48dcbb74c992c30b63757cf63e0fe06ed0a10ede2b46a6ad1f23b1257ce5b0a6338861d4f70c0f807a6fb

  • SSDEEP

    3072:34/vRfQYF5Ep7kAo+Kc8ecw0v0wnJcefSXQHPTTAkvB5Ddj:I/vRHYp7kGKc36tnJfKXqPTX7DB

Score
10/10
persistence

Malware Config

Targets

    • Target

      039b6140b10789aad213bb81f01ce520_NEIKI

    • Size

      111KB

    • MD5

      039b6140b10789aad213bb81f01ce520

    • SHA1

      ae5b76e91d5c24b066e5408b37fbac3cf0b426a6

    • SHA256

      fa98f3058719c37b105edf35226c00cba202f35bc894e7b96fa8b56aa2354e79

    • SHA512

      effd47117744384d700964acdaa5a10f4f838829abb48dcbb74c992c30b63757cf63e0fe06ed0a10ede2b46a6ad1f23b1257ce5b0a6338861d4f70c0f807a6fb

    • SSDEEP

      3072:34/vRfQYF5Ep7kAo+Kc8ecw0v0wnJcefSXQHPTTAkvB5Ddj:I/vRHYp7kGKc36tnJfKXqPTX7DB

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks