Overview

overview

10

Static

static

3

d589b64c3a...KI.exe

windows7-x64

10

d589b64c3a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d589b64c3a18df95c98a56f4dabd5cd0_NEIKI

  • Size

    194KB

  • Sample

    240509-dcn31ahd42

  • MD5

    d589b64c3a18df95c98a56f4dabd5cd0

  • SHA1

    2959bfd1123b31717a79264e7e11b68d55f4e071

  • SHA256

    b7e94000acbe69f538babfc02edae6ec41873d0781ed165b3556d45cf5d4a661

  • SHA512

    a0efdf0e7b943681963fe0b11356c79e6c750703a620518418ac6205221bfb370b461c408cd127300c30fee4ec3c4c930d8c74ac070ca7f8ab21e16699771c5b

  • SSDEEP

    3072:YQarylKY6hLFJpLS6IF3mMIM/kEmMIGumMIc/1GV:YQmyKY6hLFJpLS935/pbuh/UV

Score
10/10
persistence

Malware Config

Targets

    • Target

      d589b64c3a18df95c98a56f4dabd5cd0_NEIKI

    • Size

      194KB

    • MD5

      d589b64c3a18df95c98a56f4dabd5cd0

    • SHA1

      2959bfd1123b31717a79264e7e11b68d55f4e071

    • SHA256

      b7e94000acbe69f538babfc02edae6ec41873d0781ed165b3556d45cf5d4a661

    • SHA512

      a0efdf0e7b943681963fe0b11356c79e6c750703a620518418ac6205221bfb370b461c408cd127300c30fee4ec3c4c930d8c74ac070ca7f8ab21e16699771c5b

    • SSDEEP

      3072:YQarylKY6hLFJpLS6IF3mMIM/kEmMIGumMIc/1GV:YQmyKY6hLFJpLS935/pbuh/UV

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks