Overview

overview

10

Static

static

3

c721a81292...KI.exe

windows7-x64

10

c721a81292...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c721a81292bdeee40dc2a7e7ce085e00_NEIKI

  • Size

    172KB

  • Sample

    240509-cedjlseh67

  • MD5

    c721a81292bdeee40dc2a7e7ce085e00

  • SHA1

    d17a43c98e15dac40f823d785aa97609192f5f4f

  • SHA256

    d991fad0de12e835eb5770c692be5a5c3f084cf510b93218e723cb9cfdc70025

  • SHA512

    fceaff8c33aa5ecccb079fe3ba9e3936c495ba7c6905ebbf0242aeea63f642fd791a5504454a2006567ecf2660da70ed25d0644fa52ad5db1459f209f35ac103

  • SSDEEP

    3072:sJj33rg9xgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ:en898rtMsQB

Score
10/10
persistence

Malware Config

Targets

    • Target

      c721a81292bdeee40dc2a7e7ce085e00_NEIKI

    • Size

      172KB

    • MD5

      c721a81292bdeee40dc2a7e7ce085e00

    • SHA1

      d17a43c98e15dac40f823d785aa97609192f5f4f

    • SHA256

      d991fad0de12e835eb5770c692be5a5c3f084cf510b93218e723cb9cfdc70025

    • SHA512

      fceaff8c33aa5ecccb079fe3ba9e3936c495ba7c6905ebbf0242aeea63f642fd791a5504454a2006567ecf2660da70ed25d0644fa52ad5db1459f209f35ac103

    • SSDEEP

      3072:sJj33rg9xgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ:en898rtMsQB

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks