Overview

overview

10

Static

static

3

c249b23aac...KI.exe

windows7-x64

10

c249b23aac...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c249b23aac1915ff485a9124e29bbe30_NEIKI

  • Size

    2.0MB

  • Sample

    240509-b4hdesbd9w

  • MD5

    c249b23aac1915ff485a9124e29bbe30

  • SHA1

    d57ac3d69c4f13fb22b897ca9f0d69487dfb5c7c

  • SHA256

    6eb93fbb371508ae016a3f58ea6cabee0ed700608c37e0d38e87637e3933fb4a

  • SHA512

    34f535c4aff2446904e563819c53b7872fc1b19b898846e4b86aecdb91ad67ff7b52f92f3da60e89b9343f232b331444416aaad714880016c4228163335c227d

  • SSDEEP

    12288:MoQBpnchWcZoObfOS+9YGc3l1+RobUCmf2bx3zBX3yF+EKFhDzP3UZ9xE9jKB3ny:LQDcLfDdGOVmfihmevP3r9jKB3nwPg

Score
10/10
persistence

Malware Config

Targets

    • Target

      c249b23aac1915ff485a9124e29bbe30_NEIKI

    • Size

      2.0MB

    • MD5

      c249b23aac1915ff485a9124e29bbe30

    • SHA1

      d57ac3d69c4f13fb22b897ca9f0d69487dfb5c7c

    • SHA256

      6eb93fbb371508ae016a3f58ea6cabee0ed700608c37e0d38e87637e3933fb4a

    • SHA512

      34f535c4aff2446904e563819c53b7872fc1b19b898846e4b86aecdb91ad67ff7b52f92f3da60e89b9343f232b331444416aaad714880016c4228163335c227d

    • SSDEEP

      12288:MoQBpnchWcZoObfOS+9YGc3l1+RobUCmf2bx3zBX3yF+EKFhDzP3UZ9xE9jKB3ny:LQDcLfDdGOVmfihmevP3r9jKB3nwPg

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks