Overview

overview

10

Static

static

3

0027ff48ed...KI.exe

windows7-x64

10

0027ff48ed...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0027ff48ed53baeb7380b5ca13c5f290_NEIKI

  • Size

    1.3MB

  • Sample

    240508-hw9w2agd4x

  • MD5

    0027ff48ed53baeb7380b5ca13c5f290

  • SHA1

    e588e0674c09dde33fccab19c942f018c910bd21

  • SHA256

    f6e7eb46a8a78d039cf2f808e562ab069a3ff50782a99dd129c6b3e0f9d67e86

  • SHA512

    18dfb1c3136b8cc1340eeead84871e35edae1cdd1c2430248d4dcdd1e4d153efda44e79bf3f7923b7e70069b7b4fc5381b9d2adc22044fbb39979fce1028b407

  • SSDEEP

    24576:wPEyNPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW:5yFbazR0vKLXZ

Score
10/10
persistence

Malware Config

Targets

    • Target

      0027ff48ed53baeb7380b5ca13c5f290_NEIKI

    • Size

      1.3MB

    • MD5

      0027ff48ed53baeb7380b5ca13c5f290

    • SHA1

      e588e0674c09dde33fccab19c942f018c910bd21

    • SHA256

      f6e7eb46a8a78d039cf2f808e562ab069a3ff50782a99dd129c6b3e0f9d67e86

    • SHA512

      18dfb1c3136b8cc1340eeead84871e35edae1cdd1c2430248d4dcdd1e4d153efda44e79bf3f7923b7e70069b7b4fc5381b9d2adc22044fbb39979fce1028b407

    • SSDEEP

      24576:wPEyNPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW:5yFbazR0vKLXZ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks