Overview

overview

7

Static

static

3

a921d9f1c6...KI.exe

windows7-x64

7

a921d9f1c6...KI.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a921d9f1c615e317301ee2bcc27a46d0_NEIKI

  • Size

    1.4MB

  • Sample

    240509-aj39qahh85

  • MD5

    a921d9f1c615e317301ee2bcc27a46d0

  • SHA1

    32940f7161033509c208ef7aaecb09c82b412a1d

  • SHA256

    e7d0694f0d9abc6f7e066ad37eebbd58751f73abbe200881050b22d2e43937ce

  • SHA512

    258c02dfda76d9e8b0ce0dff837b02479cac9efd1a41d379ad2b07c5a9cd0f98af0842542d0fa503c20c65dfbb85abb48f48f334b166601f79f74905ba20fb2b

  • SSDEEP

    12288:oqz2DWUWCW1MqPdHr96NpYTixKFbyVONup5xIf6nv1Lq:Jz2DWjlpPdHr9JTixKFy06IfWB

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      a921d9f1c615e317301ee2bcc27a46d0_NEIKI

    • Size

      1.4MB

    • MD5

      a921d9f1c615e317301ee2bcc27a46d0

    • SHA1

      32940f7161033509c208ef7aaecb09c82b412a1d

    • SHA256

      e7d0694f0d9abc6f7e066ad37eebbd58751f73abbe200881050b22d2e43937ce

    • SHA512

      258c02dfda76d9e8b0ce0dff837b02479cac9efd1a41d379ad2b07c5a9cd0f98af0842542d0fa503c20c65dfbb85abb48f48f334b166601f79f74905ba20fb2b

    • SSDEEP

      12288:oqz2DWUWCW1MqPdHr96NpYTixKFbyVONup5xIf6nv1Lq:Jz2DWjlpPdHr9JTixKFy06IfWB

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks