Overview

overview

10

Static

static

3

d1aa20611a...KI.exe

windows7-x64

10

d1aa20611a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1aa20611a606e6a84c775dbe1591ad0_NEIKI

  • Size

    352KB

  • Sample

    240509-c4l72sdh9v

  • MD5

    d1aa20611a606e6a84c775dbe1591ad0

  • SHA1

    85eadf44dbe3973436bbff1ebaaaa0d823f8aaa8

  • SHA256

    67f0704868670196b152707e811a06f914562d4912254267e4a76fcf65a1f7fd

  • SHA512

    dc23dbfce63c869809a64a2417ef032d27ef0ca8ebd8ee8ee97af8851cc9ea7442ee42a03cd96e0540c92884d91161ef715982b4d90b1054710583e8c80d3c69

  • SSDEEP

    3072:8WyHZ2JdSvqsGmOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:Jy52J8vpGv4yjwHL/T7Gsyn

Score
10/10
persistence

Malware Config

Targets

    • Target

      d1aa20611a606e6a84c775dbe1591ad0_NEIKI

    • Size

      352KB

    • MD5

      d1aa20611a606e6a84c775dbe1591ad0

    • SHA1

      85eadf44dbe3973436bbff1ebaaaa0d823f8aaa8

    • SHA256

      67f0704868670196b152707e811a06f914562d4912254267e4a76fcf65a1f7fd

    • SHA512

      dc23dbfce63c869809a64a2417ef032d27ef0ca8ebd8ee8ee97af8851cc9ea7442ee42a03cd96e0540c92884d91161ef715982b4d90b1054710583e8c80d3c69

    • SSDEEP

      3072:8WyHZ2JdSvqsGmOJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:Jy52J8vpGv4yjwHL/T7Gsyn

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks