Overview

overview

10

Static

static

3

b51cdd8fd2...KI.exe

windows7-x64

10

b51cdd8fd2...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b51cdd8fd2289778103a98056b94ae40_NEIKI

  • Size

    483KB

  • Sample

    240509-bbpxssbh34

  • MD5

    b51cdd8fd2289778103a98056b94ae40

  • SHA1

    ebde83d4ac518939211c3407d88aa46a9aed89da

  • SHA256

    2cf2af2fec6a4db017ddf61ecfc94f5794fd1678218d2fdf58940e3aad49b303

  • SHA512

    69c6043310a1667bd39cccb787a08a3c99bda3fce1e20307e8645e8b2d9b790af906a2eb3c4d2c013cad62376c53bfbf2c3656f49b4b738df0244ca5b8ab288a

  • SSDEEP

    12288:vAVxSmEtY5vARMSG0dhvARM/3ARMSG0dhvARMoHG:vAVxSmEtY5wdhcdhMHG

Score
10/10
persistence

Malware Config

Targets

    • Target

      b51cdd8fd2289778103a98056b94ae40_NEIKI

    • Size

      483KB

    • MD5

      b51cdd8fd2289778103a98056b94ae40

    • SHA1

      ebde83d4ac518939211c3407d88aa46a9aed89da

    • SHA256

      2cf2af2fec6a4db017ddf61ecfc94f5794fd1678218d2fdf58940e3aad49b303

    • SHA512

      69c6043310a1667bd39cccb787a08a3c99bda3fce1e20307e8645e8b2d9b790af906a2eb3c4d2c013cad62376c53bfbf2c3656f49b4b738df0244ca5b8ab288a

    • SSDEEP

      12288:vAVxSmEtY5vARMSG0dhvARM/3ARMSG0dhvARMoHG:vAVxSmEtY5wdhcdhMHG

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks