Overview

overview

10

Static

static

3

1e118c3032...KI.exe

windows7-x64

10

1e118c3032...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e118c303246c56dcc822394002b3380_NEIKI

  • Size

    176KB

  • Sample

    240508-jx4l3sdb69

  • MD5

    1e118c303246c56dcc822394002b3380

  • SHA1

    3c0c5c336348b223c50973d643651bfe13132dcb

  • SHA256

    fc467ab4e4c23e3213984b73344e67693b18eb74f62de06feaf1eb8e975c8499

  • SHA512

    9f5675a8ca6de79d5212f6309a0c8bd8f732093111b59ea67df67a1f9ea721909c5aca6bf46ee142ef34a28ef559cbb916d59b881813623bc1f467c297106d82

  • SSDEEP

    3072:9v6ihrFR3vvaO48Rv88UQ/arlOGA8d2E2fAYjmjRrz3E3:56mvaO48RkY/RXE2fAEG4

Score
10/10
persistence

Malware Config

Targets

    • Target

      1e118c303246c56dcc822394002b3380_NEIKI

    • Size

      176KB

    • MD5

      1e118c303246c56dcc822394002b3380

    • SHA1

      3c0c5c336348b223c50973d643651bfe13132dcb

    • SHA256

      fc467ab4e4c23e3213984b73344e67693b18eb74f62de06feaf1eb8e975c8499

    • SHA512

      9f5675a8ca6de79d5212f6309a0c8bd8f732093111b59ea67df67a1f9ea721909c5aca6bf46ee142ef34a28ef559cbb916d59b881813623bc1f467c297106d82

    • SSDEEP

      3072:9v6ihrFR3vvaO48Rv88UQ/arlOGA8d2E2fAYjmjRrz3E3:56mvaO48RkY/RXE2fAEG4

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks