Overview

overview

10

Static

static

3

0d23d20b76...KI.exe

windows7-x64

10

0d23d20b76...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d23d20b763414dd10093f6de47a8820_NEIKI

  • Size

    109KB

  • Sample

    240508-jbv3tahc8v

  • MD5

    0d23d20b763414dd10093f6de47a8820

  • SHA1

    2cc0135520f12cdde66c9987e2fe63a87cc8f772

  • SHA256

    b3313e683494fac17c7b0f5add7cd7f98ae4725016613c5a26596ccb1b4c81a7

  • SHA512

    24c224b6fbda62964952b792f022218dc1a62cf0f66e57ed905da5368adc93b2fc56f96042ef54f150703a404a68aa30f933f091b64e9ee8d8536dccacc2819a

  • SSDEEP

    3072:pHVYOftJdVqyZUYutdZjOiwjN748fo3PXl9Z7S/yCsKh2EzZA/z:/dDmEUYmZjOJN74go35e/yCthvUz

Score
10/10
persistence

Malware Config

Targets

    • Target

      0d23d20b763414dd10093f6de47a8820_NEIKI

    • Size

      109KB

    • MD5

      0d23d20b763414dd10093f6de47a8820

    • SHA1

      2cc0135520f12cdde66c9987e2fe63a87cc8f772

    • SHA256

      b3313e683494fac17c7b0f5add7cd7f98ae4725016613c5a26596ccb1b4c81a7

    • SHA512

      24c224b6fbda62964952b792f022218dc1a62cf0f66e57ed905da5368adc93b2fc56f96042ef54f150703a404a68aa30f933f091b64e9ee8d8536dccacc2819a

    • SSDEEP

      3072:pHVYOftJdVqyZUYutdZjOiwjN748fo3PXl9Z7S/yCsKh2EzZA/z:/dDmEUYmZjOJN74go35e/yCthvUz

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks