Overview

overview

10

Static

static

3

d3e025288f...KI.exe

windows7-x64

10

d3e025288f...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d3e025288f1684713f3dd466318a13b0_NEIKI

  • Size

    197KB

  • Sample

    240509-c9hrtahb43

  • MD5

    d3e025288f1684713f3dd466318a13b0

  • SHA1

    e1f27e7ce79defa8826a110f385668728b324a4a

  • SHA256

    32d273e53eada73b3e1429fef7b3c07fe81072691fb6d700e2a1662cba9ab461

  • SHA512

    84e20c3d27fc412a61b68752ef4ee0edda7587b18c17c2f0fb4c3dc990a7fe5dd9abf6db2604b38cb0f89f620452cb8ea82352fa0a943f377176f64c4719894e

  • SSDEEP

    6144:qrlB6kk4Wg4fQkjxqvak+PH/RARMHGb3fJt4X:ab4IyxqCfRARR6

Score
10/10
persistence

Malware Config

Targets

    • Target

      d3e025288f1684713f3dd466318a13b0_NEIKI

    • Size

      197KB

    • MD5

      d3e025288f1684713f3dd466318a13b0

    • SHA1

      e1f27e7ce79defa8826a110f385668728b324a4a

    • SHA256

      32d273e53eada73b3e1429fef7b3c07fe81072691fb6d700e2a1662cba9ab461

    • SHA512

      84e20c3d27fc412a61b68752ef4ee0edda7587b18c17c2f0fb4c3dc990a7fe5dd9abf6db2604b38cb0f89f620452cb8ea82352fa0a943f377176f64c4719894e

    • SSDEEP

      6144:qrlB6kk4Wg4fQkjxqvak+PH/RARMHGb3fJt4X:ab4IyxqCfRARR6

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks