Overview

overview

10

Static

static

3

be5a7a7c88...KI.exe

windows7-x64

10

be5a7a7c88...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be5a7a7c88db60f8979973d0c9caa3e0_NEIKI

  • Size

    80KB

  • Sample

    240508-qjdbased6z

  • MD5

    be5a7a7c88db60f8979973d0c9caa3e0

  • SHA1

    b9c29ca29e542f621aab8a50be9f82e719edefd8

  • SHA256

    64adf0d4e7a20f2ccfadc323c960723b5632da91039f93da988693e5cc3e217e

  • SHA512

    80634b8beb6fb4aa70d3637a025748d80467b3ebfbe56e5421bdfe2c5d74a5c32e4db06ac94159a8c25a42e191a1476e2a4e9fb262623d98c27a230189cdaf04

  • SSDEEP

    1536:Pj4gqVAkytVmKRYSX/dHIRiV6N+zL20gJi1i9:Pj4/EtxF/d6iV6gzL20WKS

Score
10/10
persistence

Malware Config

Targets

    • Target

      be5a7a7c88db60f8979973d0c9caa3e0_NEIKI

    • Size

      80KB

    • MD5

      be5a7a7c88db60f8979973d0c9caa3e0

    • SHA1

      b9c29ca29e542f621aab8a50be9f82e719edefd8

    • SHA256

      64adf0d4e7a20f2ccfadc323c960723b5632da91039f93da988693e5cc3e217e

    • SHA512

      80634b8beb6fb4aa70d3637a025748d80467b3ebfbe56e5421bdfe2c5d74a5c32e4db06ac94159a8c25a42e191a1476e2a4e9fb262623d98c27a230189cdaf04

    • SSDEEP

      1536:Pj4gqVAkytVmKRYSX/dHIRiV6N+zL20gJi1i9:Pj4/EtxF/d6iV6gzL20WKS

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks