Overview

overview

10

Static

static

3

310afe6e10...KI.exe

windows7-x64

10

310afe6e10...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    310afe6e10c7a1d54fb68f6b9c54f030_NEIKI

  • Size

    128KB

  • Sample

    240508-kls7msee56

  • MD5

    310afe6e10c7a1d54fb68f6b9c54f030

  • SHA1

    790c05c4689e2f21a74f02b06c657bff5c03502e

  • SHA256

    97ad4ac2e1ee3023a9f3ac7125ace4772a49e70289beab237c3c9bbdc3c3df74

  • SHA512

    ed3a6ef2fb974fc4dc34cdc9fea943935d50a6413b3010ed0f3b034f54ed2805cab1159a6e176051de1164fb3dfab2b4b0657dbd128c9824e68c337539aec54e

  • SSDEEP

    3072:XcYcvALMS9AnXe+lj9pui6yYPaI7DehizrVtN:Byq3dypui6yYPaIGc

Score
10/10
persistence

Malware Config

Targets

    • Target

      310afe6e10c7a1d54fb68f6b9c54f030_NEIKI

    • Size

      128KB

    • MD5

      310afe6e10c7a1d54fb68f6b9c54f030

    • SHA1

      790c05c4689e2f21a74f02b06c657bff5c03502e

    • SHA256

      97ad4ac2e1ee3023a9f3ac7125ace4772a49e70289beab237c3c9bbdc3c3df74

    • SHA512

      ed3a6ef2fb974fc4dc34cdc9fea943935d50a6413b3010ed0f3b034f54ed2805cab1159a6e176051de1164fb3dfab2b4b0657dbd128c9824e68c337539aec54e

    • SSDEEP

      3072:XcYcvALMS9AnXe+lj9pui6yYPaI7DehizrVtN:Byq3dypui6yYPaIGc

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks