Overview

overview

10

Static

static

3

68f8d04d9a...KI.exe

windows7-x64

10

68f8d04d9a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    68f8d04d9a99773e510f803021c82cd0_NEIKI

  • Size

    280KB

  • Sample

    240508-mp69saah23

  • MD5

    68f8d04d9a99773e510f803021c82cd0

  • SHA1

    04da9d908fc9f6fdc6147a29298c057b859b90d6

  • SHA256

    d39f3baa50d49aa0cc5c6df1e6ae1d3fb60e0abdb8437d1213d77abbdcd4b6f9

  • SHA512

    a5b9a4f20b349f8687d873ca846a5aa2db444d746904d76161597b76fd2c6cf22ac57d7e91114c49bddaf177a6b980cf772a2afe935a665f15a7cb90614a493c

  • SSDEEP

    3072:+a3YW9zaFCx3anu1axvnF4hZK7xVG9Btj676ZBI:/pt34nFqZo4tjS6Y

Score
10/10
persistence

Malware Config

Targets

    • Target

      68f8d04d9a99773e510f803021c82cd0_NEIKI

    • Size

      280KB

    • MD5

      68f8d04d9a99773e510f803021c82cd0

    • SHA1

      04da9d908fc9f6fdc6147a29298c057b859b90d6

    • SHA256

      d39f3baa50d49aa0cc5c6df1e6ae1d3fb60e0abdb8437d1213d77abbdcd4b6f9

    • SHA512

      a5b9a4f20b349f8687d873ca846a5aa2db444d746904d76161597b76fd2c6cf22ac57d7e91114c49bddaf177a6b980cf772a2afe935a665f15a7cb90614a493c

    • SSDEEP

      3072:+a3YW9zaFCx3anu1axvnF4hZK7xVG9Btj676ZBI:/pt34nFqZo4tjS6Y

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks