General

  • Target

    545481c4ed3c09558e861536d8e825d0_NEIKI

  • Size

    847KB

  • Sample

    240508-zzh16aff8t

  • MD5

    545481c4ed3c09558e861536d8e825d0

  • SHA1

    3276fec1f0fa96b9e4789146048448d486ef37b9

  • SHA256

    1d5eaa309ea7644338606aeacd627e6e90cc0d0a1f3043e635c61a48c0e46a70

  • SHA512

    f587f916ba50a0a13eed46b5343ccfb7e1c1c55da1c300b8286b6429ddd55f8a209505dad8b835e11c55fcccd7615cd546363ccacd78de27d83e81048b376cb7

  • SSDEEP

    24576:p1bRVqnr3NjBBcGUOb4LG1WJgj0acJOq0WiV:pPSNx4Li95Pq0t

Score
10/10

Malware Config

Targets

    • Target

      545481c4ed3c09558e861536d8e825d0_NEIKI

    • Size

      847KB

    • MD5

      545481c4ed3c09558e861536d8e825d0

    • SHA1

      3276fec1f0fa96b9e4789146048448d486ef37b9

    • SHA256

      1d5eaa309ea7644338606aeacd627e6e90cc0d0a1f3043e635c61a48c0e46a70

    • SHA512

      f587f916ba50a0a13eed46b5343ccfb7e1c1c55da1c300b8286b6429ddd55f8a209505dad8b835e11c55fcccd7615cd546363ccacd78de27d83e81048b376cb7

    • SSDEEP

      24576:p1bRVqnr3NjBBcGUOb4LG1WJgj0acJOq0WiV:pPSNx4Li95Pq0t

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks