Overview

overview

10

Static

static

3

4af516af75...KI.exe

windows7-x64

10

4af516af75...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4af516af758bc7c077751b953d143260_NEIKI

  • Size

    512KB

  • Sample

    240508-lldydsea7v

  • MD5

    4af516af758bc7c077751b953d143260

  • SHA1

    ddf029d5023d732ab98712dc659bc64e7af80bc7

  • SHA256

    2f004cd947096da746b58bd4520c58b7d7b22b5fbe120ff15655686604518a28

  • SHA512

    a895b24d1fcc0619dd1cbb7e6e07c69b2aa053ad9f60ec79acff9d7bdb2ab74160d115c56309903058357c0d8133e6648bd6ed0a752c3b6c1bcd254a50b902d5

  • SSDEEP

    6144:ew/qrdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01PB93GxK:dvr/Ng1/Nblt01PBExK

Score
10/10
persistence

Malware Config

Targets

    • Target

      4af516af758bc7c077751b953d143260_NEIKI

    • Size

      512KB

    • MD5

      4af516af758bc7c077751b953d143260

    • SHA1

      ddf029d5023d732ab98712dc659bc64e7af80bc7

    • SHA256

      2f004cd947096da746b58bd4520c58b7d7b22b5fbe120ff15655686604518a28

    • SHA512

      a895b24d1fcc0619dd1cbb7e6e07c69b2aa053ad9f60ec79acff9d7bdb2ab74160d115c56309903058357c0d8133e6648bd6ed0a752c3b6c1bcd254a50b902d5

    • SSDEEP

      6144:ew/qrdQt383PQ///NR5fKr2n0MO3LPlkUCmVs5bPQ///NR5fjlt01PB93GxK:dvr/Ng1/Nblt01PBExK

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks