Overview

overview

10

Static

static

3

3ac38fbdd9...KI.exe

windows7-x64

10

3ac38fbdd9...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ac38fbdd983f189e47f8b95eb1fedb0_NEIKI

  • Size

    479KB

  • Sample

    240508-kz39rsfc76

  • MD5

    3ac38fbdd983f189e47f8b95eb1fedb0

  • SHA1

    c2f099a2e433d57186bb9585cae66cbc2e47f9bf

  • SHA256

    66d7323c0e158b3e2cbce1f002b27da0edf21e731d21150616ecee87bdb76f86

  • SHA512

    72ad48c4a77f75deec3094734e4c995da160c8ad41ae87cbeb6f1c9cf486c5468a48b619f0d13074da3c8e7143d210a3b59ecf8a277e426ed61014e4991d9686

  • SSDEEP

    6144:fZsREVVPOwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:zSwIaJwISfPI

Score
10/10
persistence

Malware Config

Targets

    • Target

      3ac38fbdd983f189e47f8b95eb1fedb0_NEIKI

    • Size

      479KB

    • MD5

      3ac38fbdd983f189e47f8b95eb1fedb0

    • SHA1

      c2f099a2e433d57186bb9585cae66cbc2e47f9bf

    • SHA256

      66d7323c0e158b3e2cbce1f002b27da0edf21e731d21150616ecee87bdb76f86

    • SHA512

      72ad48c4a77f75deec3094734e4c995da160c8ad41ae87cbeb6f1c9cf486c5468a48b619f0d13074da3c8e7143d210a3b59ecf8a277e426ed61014e4991d9686

    • SSDEEP

      6144:fZsREVVPOwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:zSwIaJwISfPI

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks