Overview

overview

7

Static

static

3

40f62f9bb3...KI.exe

windows7-x64

7

40f62f9bb3...KI.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    40f62f9bb30c727a9178a66fbd383df0_NEIKI

  • Size

    12KB

  • Sample

    240508-y9wjkage76

  • MD5

    40f62f9bb30c727a9178a66fbd383df0

  • SHA1

    625b95f498d7a07ca2c5e8276af7d01b364a42a3

  • SHA256

    f630b21de3b6bb62074358156dda4504a469121865eac0d6bfe59f3273fc0e36

  • SHA512

    da7accb1f263bfc2e797c82d539a6d800216ebd368771b8e2257059fe7bd6c18842f3a5873907c0cc6574ad219b82db61e21687158ccd15c10cb49c639bc54d7

  • SSDEEP

    384:YL7li/2z9q2DcEQvdhcJKLTp/NK9xald:m1M/Q9cld

Score
7/10

Malware Config

Targets

    • Target

      40f62f9bb30c727a9178a66fbd383df0_NEIKI

    • Size

      12KB

    • MD5

      40f62f9bb30c727a9178a66fbd383df0

    • SHA1

      625b95f498d7a07ca2c5e8276af7d01b364a42a3

    • SHA256

      f630b21de3b6bb62074358156dda4504a469121865eac0d6bfe59f3273fc0e36

    • SHA512

      da7accb1f263bfc2e797c82d539a6d800216ebd368771b8e2257059fe7bd6c18842f3a5873907c0cc6574ad219b82db61e21687158ccd15c10cb49c639bc54d7

    • SSDEEP

      384:YL7li/2z9q2DcEQvdhcJKLTp/NK9xald:m1M/Q9cld

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks