Overview

overview

7

Static

static

3

d57028943a...KI.exe

windows7-x64

7

d57028943a...KI.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d57028943abc3926a1639833c7c705c0_NEIKI

  • Size

    12KB

  • Sample

    240508-rggflsaf69

  • MD5

    d57028943abc3926a1639833c7c705c0

  • SHA1

    8b379be16ff2f39db134b47cdaf6218170c7592d

  • SHA256

    ca9c547769525a71e366e82e85900b96e10262c486ec28c809d80c56fc380250

  • SHA512

    a1283ace3482549800a4c7f4459083be04e2dbf7cbb90950fca2ca59705afd0cd850dc1ae6e7faf109bfe9ca359a0af8c254c41065df0673fe28412d58c7c66d

  • SSDEEP

    384:rL7li/2zOq2DcEQvdhcJKLTp/NK9xaPX:/+M/Q9cPX

Score
7/10

Malware Config

Targets

    • Target

      d57028943abc3926a1639833c7c705c0_NEIKI

    • Size

      12KB

    • MD5

      d57028943abc3926a1639833c7c705c0

    • SHA1

      8b379be16ff2f39db134b47cdaf6218170c7592d

    • SHA256

      ca9c547769525a71e366e82e85900b96e10262c486ec28c809d80c56fc380250

    • SHA512

      a1283ace3482549800a4c7f4459083be04e2dbf7cbb90950fca2ca59705afd0cd850dc1ae6e7faf109bfe9ca359a0af8c254c41065df0673fe28412d58c7c66d

    • SSDEEP

      384:rL7li/2zOq2DcEQvdhcJKLTp/NK9xaPX:/+M/Q9cPX

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks