Overview

overview

10

Static

static

3

37fd006101...KI.exe

windows7-x64

10

37fd006101...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37fd006101df5edf5fb3e3ac2783a790_NEIKI

  • Size

    360KB

  • Sample

    240508-yzzs8sfh67

  • MD5

    37fd006101df5edf5fb3e3ac2783a790

  • SHA1

    997149f34c9034f922c14c642c90e65e2a0c0a75

  • SHA256

    96b23abfb06f671f916703f1b0d80cdbefd7d2561e72bcef2f33db2098332434

  • SHA512

    01c75460e78f3afb4eeef4269b3e433a01efb8e8832aef788b29557e1a8e59a3dbd0b082134fd7d8554c91c85dae5058a67238661812758665492232ba28316c

  • SSDEEP

    3072:Jwm326M6Ye/nIcqIOOJF4EISi/i4gG4nTxGkIs6CO:Jf3Cpe/Icl4yjTAkOCO

Score
10/10
persistence

Malware Config

Targets

    • Target

      37fd006101df5edf5fb3e3ac2783a790_NEIKI

    • Size

      360KB

    • MD5

      37fd006101df5edf5fb3e3ac2783a790

    • SHA1

      997149f34c9034f922c14c642c90e65e2a0c0a75

    • SHA256

      96b23abfb06f671f916703f1b0d80cdbefd7d2561e72bcef2f33db2098332434

    • SHA512

      01c75460e78f3afb4eeef4269b3e433a01efb8e8832aef788b29557e1a8e59a3dbd0b082134fd7d8554c91c85dae5058a67238661812758665492232ba28316c

    • SSDEEP

      3072:Jwm326M6Ye/nIcqIOOJF4EISi/i4gG4nTxGkIs6CO:Jf3Cpe/Icl4yjTAkOCO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks