Overview

overview

10

Static

static

3

51e16da979...KI.exe

windows7-x64

10

51e16da979...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    51e16da979952dc802b8b68ac0eb1670_NEIKI

  • Size

    280KB

  • Sample

    240508-ltqbdsha87

  • MD5

    51e16da979952dc802b8b68ac0eb1670

  • SHA1

    1bb4ba1b1803d1cd4786eff2ec981ed1cfe9767e

  • SHA256

    d7ab02b491c6fbbc07def81fb77536dc496e03f5b3f99caceb90a8d312b203af

  • SHA512

    da1eeddcc5a05de1fbbac5973681dc93a204db5e7b8c741a3c7606c540bb6b5bea8fdbb2499eec87da4c2c4138b3f1ee451fb86fbf151ef41c732af950ef3dee

  • SSDEEP

    6144:ZCY9Julszbi/GOORjMmRUoooooooooooooooooooooooooy/G3:FMlCi//OVLCooooooooooooooooooooa

Score
10/10
persistence

Malware Config

Targets

    • Target

      51e16da979952dc802b8b68ac0eb1670_NEIKI

    • Size

      280KB

    • MD5

      51e16da979952dc802b8b68ac0eb1670

    • SHA1

      1bb4ba1b1803d1cd4786eff2ec981ed1cfe9767e

    • SHA256

      d7ab02b491c6fbbc07def81fb77536dc496e03f5b3f99caceb90a8d312b203af

    • SHA512

      da1eeddcc5a05de1fbbac5973681dc93a204db5e7b8c741a3c7606c540bb6b5bea8fdbb2499eec87da4c2c4138b3f1ee451fb86fbf151ef41c732af950ef3dee

    • SSDEEP

      6144:ZCY9Julszbi/GOORjMmRUoooooooooooooooooooooooooy/G3:FMlCi//OVLCooooooooooooooooooooa

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks