Overview

overview

10

Static

static

3

1c254c84d3...KI.exe

windows7-x64

10

1c254c84d3...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c254c84d346f4b192ce951161d6b2d0_NEIKI

  • Size

    169KB

  • Sample

    240508-jvtdbsda59

  • MD5

    1c254c84d346f4b192ce951161d6b2d0

  • SHA1

    c974d7a9143c19b49b82392e0271c777587308a4

  • SHA256

    8d7095c3a66b48b7cf31f91e1cbeeb6ecb45ffb6611459815f7ce719301e4ab1

  • SHA512

    cb51fd8835b460ae844d063826100112ea45e736adbb4bf5f05f5ff703e38c84fdc14d64c32805dcb64f22acbb9687a594cdf570c50f488c043d08533ca1f855

  • SSDEEP

    3072:RPt08X2HVpm2nEJXuDAcZPxMeEvPOdgujv6NLPfFFrKP92f65Ha:bX21pm2EJMZJML3OdgawrFZKPf9

Score
10/10
persistence

Malware Config

Targets

    • Target

      1c254c84d346f4b192ce951161d6b2d0_NEIKI

    • Size

      169KB

    • MD5

      1c254c84d346f4b192ce951161d6b2d0

    • SHA1

      c974d7a9143c19b49b82392e0271c777587308a4

    • SHA256

      8d7095c3a66b48b7cf31f91e1cbeeb6ecb45ffb6611459815f7ce719301e4ab1

    • SHA512

      cb51fd8835b460ae844d063826100112ea45e736adbb4bf5f05f5ff703e38c84fdc14d64c32805dcb64f22acbb9687a594cdf570c50f488c043d08533ca1f855

    • SSDEEP

      3072:RPt08X2HVpm2nEJXuDAcZPxMeEvPOdgujv6NLPfFFrKP92f65Ha:bX21pm2EJMZJML3OdgawrFZKPf9

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks