Overview

overview

10

Static

static

3

bacaba24fd...KI.exe

windows7-x64

10

bacaba24fd...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bacaba24fdda2c840fb3e398d49a69e0_NEIKI

  • Size

    144KB

  • Sample

    240508-qbrhysea2w

  • MD5

    bacaba24fdda2c840fb3e398d49a69e0

  • SHA1

    737a63a18ee61cbaf0280edfed1f47f76b299d1c

  • SHA256

    899cbd36fd186c45923aeaed5175753d1c89c6a8ee2b7f7f1d96e84e0ba8edda

  • SHA512

    a1dbd629f993fca632762b5ad605674c76ae6b685dba00fce8ae1e69a3870f554030fc0f4b1b0e7e1ca6c2a4be5cb6881b9d1d6de14296bd2c76d29b37572217

  • SSDEEP

    3072:lMUpGoBFc/Q9Ef5izGYJpD9r8XxrYnQg4sI+:bXEf54GyZ6Yu+

Score
10/10
persistence

Malware Config

Targets

    • Target

      bacaba24fdda2c840fb3e398d49a69e0_NEIKI

    • Size

      144KB

    • MD5

      bacaba24fdda2c840fb3e398d49a69e0

    • SHA1

      737a63a18ee61cbaf0280edfed1f47f76b299d1c

    • SHA256

      899cbd36fd186c45923aeaed5175753d1c89c6a8ee2b7f7f1d96e84e0ba8edda

    • SHA512

      a1dbd629f993fca632762b5ad605674c76ae6b685dba00fce8ae1e69a3870f554030fc0f4b1b0e7e1ca6c2a4be5cb6881b9d1d6de14296bd2c76d29b37572217

    • SSDEEP

      3072:lMUpGoBFc/Q9Ef5izGYJpD9r8XxrYnQg4sI+:bXEf54GyZ6Yu+

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks