Overview

overview

8

Static

static

3

ce586d86c9...KI.exe

windows7-x64

1

ce586d86c9...KI.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce586d86c99429d607f7e43c0f1a68f0_NEIKI

  • Size

    119KB

  • Sample

    240509-cwpcfagb82

  • MD5

    ce586d86c99429d607f7e43c0f1a68f0

  • SHA1

    6bc4e13aa1e22ba1b417faa3d99a48b9a67d0664

  • SHA256

    70b344f64bfc290e21c4e93a93e45140a4dd625206e28f1a92a1393228edbd1a

  • SHA512

    4269350f28d2c6c1abd8ef8f3f361c7cc6fe7435faaaec90096264adf8b002ed2deb608c7f3774b1f7e3952120a4d7d9a99d7eaeb93afbf841853d8a339d96d5

  • SSDEEP

    3072:4FHCJuCTH4TArK2ms7yZRTvJeM3mEwz4+X:yHAuW0Hs7UR7WEwT

Score
8/10
discovery

Malware Config

Targets

    • Target

      ce586d86c99429d607f7e43c0f1a68f0_NEIKI

    • Size

      119KB

    • MD5

      ce586d86c99429d607f7e43c0f1a68f0

    • SHA1

      6bc4e13aa1e22ba1b417faa3d99a48b9a67d0664

    • SHA256

      70b344f64bfc290e21c4e93a93e45140a4dd625206e28f1a92a1393228edbd1a

    • SHA512

      4269350f28d2c6c1abd8ef8f3f361c7cc6fe7435faaaec90096264adf8b002ed2deb608c7f3774b1f7e3952120a4d7d9a99d7eaeb93afbf841853d8a339d96d5

    • SSDEEP

      3072:4FHCJuCTH4TArK2ms7yZRTvJeM3mEwz4+X:yHAuW0Hs7UR7WEwT

    Score
    8/10
    discovery

    • Contacts a large (506) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks