Overview

overview

8

Static

static

3

b2be53c09c...KI.exe

windows7-x64

1

b2be53c09c...KI.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2be53c09c9fb876be2dfe6af68b30b0_NEIKI

  • Size

    119KB

  • Sample

    240509-a7l1cabe62

  • MD5

    b2be53c09c9fb876be2dfe6af68b30b0

  • SHA1

    7634d77396942522da7f06298afcc2c7f58a5bdd

  • SHA256

    4b40eb62476b5052143174a5f311944417c9e420a43b35edae092ac179355e55

  • SHA512

    840e991c020e73d24f45bf91cc8de61e9c713ec0e7ff0b4b15af817acbb130d15fe6945a4e09139cfba6eedc61bebacf8d57f1f5c070076516f67b338f94aa0a

  • SSDEEP

    3072:Kvt0NTc0K6lyA6Nx0pZlzxatZuib1DkgNnZ/qk/ILLb7f+XiL0SJ8p:Kv61aHtelleZ9BfNnZ/J/8H6Ss

Score
8/10
discovery

Malware Config

Targets

    • Target

      b2be53c09c9fb876be2dfe6af68b30b0_NEIKI

    • Size

      119KB

    • MD5

      b2be53c09c9fb876be2dfe6af68b30b0

    • SHA1

      7634d77396942522da7f06298afcc2c7f58a5bdd

    • SHA256

      4b40eb62476b5052143174a5f311944417c9e420a43b35edae092ac179355e55

    • SHA512

      840e991c020e73d24f45bf91cc8de61e9c713ec0e7ff0b4b15af817acbb130d15fe6945a4e09139cfba6eedc61bebacf8d57f1f5c070076516f67b338f94aa0a

    • SSDEEP

      3072:Kvt0NTc0K6lyA6Nx0pZlzxatZuib1DkgNnZ/qk/ILLb7f+XiL0SJ8p:Kv61aHtelleZ9BfNnZ/J/8H6Ss

    Score
    8/10
    discovery

    • Contacts a large (556) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks