Overview

overview

10

Static

static

3

04f5dd34fe...KI.exe

windows7-x64

10

04f5dd34fe...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04f5dd34feb4e83bc279090d0e10e6f0_NEIKI

  • Size

    412KB

  • Sample

    240508-v8tf2ahh93

  • MD5

    04f5dd34feb4e83bc279090d0e10e6f0

  • SHA1

    643012ac085d6212db1ec220efaea3ca2c8635e1

  • SHA256

    ac673df3f9d2db2acaed5170092820c4d1fe73d204c42d0e77e8392f3dbecdf6

  • SHA512

    425fb1a52ee65d89dc934b1e697109c04ecbcfd368f664bf35f3dbbacff23fa0a8ce1ec64908a24ddffc8a8f4f075a46ef58a328c2f60d2696876c61144f060f

  • SSDEEP

    6144:eo2m9KjoBB5CMHP7RQmfMishe4Zgufq+cREyR/yfjoshaphaiB00:rnCMHieikLB

Score
10/10
persistence

Malware Config

Targets

    • Target

      04f5dd34feb4e83bc279090d0e10e6f0_NEIKI

    • Size

      412KB

    • MD5

      04f5dd34feb4e83bc279090d0e10e6f0

    • SHA1

      643012ac085d6212db1ec220efaea3ca2c8635e1

    • SHA256

      ac673df3f9d2db2acaed5170092820c4d1fe73d204c42d0e77e8392f3dbecdf6

    • SHA512

      425fb1a52ee65d89dc934b1e697109c04ecbcfd368f664bf35f3dbbacff23fa0a8ce1ec64908a24ddffc8a8f4f075a46ef58a328c2f60d2696876c61144f060f

    • SSDEEP

      6144:eo2m9KjoBB5CMHP7RQmfMishe4Zgufq+cREyR/yfjoshaphaiB00:rnCMHieikLB

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks