Overview

overview

10

Static

static

3

b24cd44495...KI.exe

windows7-x64

10

b24cd44495...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b24cd4449518aa1483d2aa6089158d10_NEIKI

  • Size

    212KB

  • Sample

    240508-pwyx4afe75

  • MD5

    b24cd4449518aa1483d2aa6089158d10

  • SHA1

    89b71649933ec56b28d6e3aeea552bd98eaa478b

  • SHA256

    222d55dbbd434de2c7ef92f162bec45eeb827c01c61ed0295af2cb682d02338d

  • SHA512

    6cb0b982c476e31fc97b2d8c9d6cbfb96b8e04b15d34e753e01e5c8e4c53245c4cf433472e5ef2e286acbd73210896f5493b46411bb04318eb8ff867f5a8dcc5

  • SSDEEP

    6144:0ob34ERMS/H7YAVsobrVn5G4E3Hi96mbQzJWFO8Omw4G:zboEj/8ASWM4Ki96/zqIKG

Score
10/10
persistence

Malware Config

Targets

    • Target

      b24cd4449518aa1483d2aa6089158d10_NEIKI

    • Size

      212KB

    • MD5

      b24cd4449518aa1483d2aa6089158d10

    • SHA1

      89b71649933ec56b28d6e3aeea552bd98eaa478b

    • SHA256

      222d55dbbd434de2c7ef92f162bec45eeb827c01c61ed0295af2cb682d02338d

    • SHA512

      6cb0b982c476e31fc97b2d8c9d6cbfb96b8e04b15d34e753e01e5c8e4c53245c4cf433472e5ef2e286acbd73210896f5493b46411bb04318eb8ff867f5a8dcc5

    • SSDEEP

      6144:0ob34ERMS/H7YAVsobrVn5G4E3Hi96mbQzJWFO8Omw4G:zboEj/8ASWM4Ki96/zqIKG

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks