Overview

overview

10

Static

static

3

32ec212e3b...KI.exe

windows7-x64

10

32ec212e3b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32ec212e3b36b30a2ac14d2bcfdf3230_NEIKI

  • Size

    406KB

  • Sample

    240508-kpdlcsef62

  • MD5

    32ec212e3b36b30a2ac14d2bcfdf3230

  • SHA1

    961873a37569588880e38a058f34799c9de1f7b4

  • SHA256

    1c956286a450d4c3c557c0018be509cf63190816f68ed6755e47d98d8b05aa34

  • SHA512

    57e5208e1564a8e85760a92893c26712917971bdb12aa793cace5c6036786a20885d0178004e8665d72991f0832c065a01f82ec628639f7600ce04335e583670

  • SSDEEP

    12288:Gez+4Mw8YsQtAU4MwEo8g0YsQkIcAU4MwEo8g0YsQkIcAU4MwEo8g0YkIlxdpVhS:Gu+4Mw8YsQtAU4MwEo8g0YsQkIcAU4MN

Score
10/10
persistence

Malware Config

Targets

    • Target

      32ec212e3b36b30a2ac14d2bcfdf3230_NEIKI

    • Size

      406KB

    • MD5

      32ec212e3b36b30a2ac14d2bcfdf3230

    • SHA1

      961873a37569588880e38a058f34799c9de1f7b4

    • SHA256

      1c956286a450d4c3c557c0018be509cf63190816f68ed6755e47d98d8b05aa34

    • SHA512

      57e5208e1564a8e85760a92893c26712917971bdb12aa793cace5c6036786a20885d0178004e8665d72991f0832c065a01f82ec628639f7600ce04335e583670

    • SSDEEP

      12288:Gez+4Mw8YsQtAU4MwEo8g0YsQkIcAU4MwEo8g0YsQkIcAU4MwEo8g0YkIlxdpVhS:Gu+4Mw8YsQtAU4MwEo8g0YsQkIcAU4MN

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks