Overview

overview

10

Static

static

3

2e8c7cd8b3...KI.exe

windows7-x64

10

2e8c7cd8b3...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e8c7cd8b39b5d5ec2e2cd542cade950_NEIKI

  • Size

    296KB

  • Sample

    240508-khp1taed26

  • MD5

    2e8c7cd8b39b5d5ec2e2cd542cade950

  • SHA1

    ec0a77aaa40f087b06c1f3cd26290a22da651c77

  • SHA256

    65593fadec39dec3aafc532b56f5330f8380ea6bb31ade98927fb9fe32155340

  • SHA512

    a6fb3cb8b65bd5c738a06fe69c4f1f436ea29b84a2189deb2bba0b17d914633097505250aa36d477ff39f3104321f800341b4d0bd9df8d43e0cbd2da35ddc23c

  • SSDEEP

    3072:gW8SLGCL1X24ho1mtye3lFDrFDHZtOga24ho1mtye3l+J4IUYjDjmjDjDj4j4j4d:gZSbL1ksFj5tT3sF7IZPWOsFi

Score
10/10
persistence

Malware Config

Targets

    • Target

      2e8c7cd8b39b5d5ec2e2cd542cade950_NEIKI

    • Size

      296KB

    • MD5

      2e8c7cd8b39b5d5ec2e2cd542cade950

    • SHA1

      ec0a77aaa40f087b06c1f3cd26290a22da651c77

    • SHA256

      65593fadec39dec3aafc532b56f5330f8380ea6bb31ade98927fb9fe32155340

    • SHA512

      a6fb3cb8b65bd5c738a06fe69c4f1f436ea29b84a2189deb2bba0b17d914633097505250aa36d477ff39f3104321f800341b4d0bd9df8d43e0cbd2da35ddc23c

    • SSDEEP

      3072:gW8SLGCL1X24ho1mtye3lFDrFDHZtOga24ho1mtye3l+J4IUYjDjmjDjDj4j4j4d:gZSbL1ksFj5tT3sF7IZPWOsFi

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks