Overview

overview

10

Static

static

3

d9c932b330...KI.exe

windows7-x64

10

d9c932b330...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9c932b3300a9fa1bba314496ccf6b10_NEIKI

  • Size

    704KB

  • Sample

    240509-dmyp7aaa85

  • MD5

    d9c932b3300a9fa1bba314496ccf6b10

  • SHA1

    ebec542fc1cee988ebc19ea606b52cdb7c8776ea

  • SHA256

    e972c60d171a5bf72a5d9cb57145ced14a62e91c345a33dfbcc7c78d1868e29c

  • SHA512

    8ebcdabadaffce7b5bd5e9aea2e3f97680f22ff2affdc1ded3c1c8f2fb4b6b447556c2c220c72178e9d0151cec8f102f9bbddf61bbbbe5ac74a983b6095ae2e4

  • SSDEEP

    12288:ZWreCfp5fwQb45fwPPh2kkkkK4kXkkkkkkkkl888888888888888888nusMH0Qiq:DCfp5fB45foPh2kkkkK4kXkkkkkkkkhs

Score
10/10
persistence

Malware Config

Targets

    • Target

      d9c932b3300a9fa1bba314496ccf6b10_NEIKI

    • Size

      704KB

    • MD5

      d9c932b3300a9fa1bba314496ccf6b10

    • SHA1

      ebec542fc1cee988ebc19ea606b52cdb7c8776ea

    • SHA256

      e972c60d171a5bf72a5d9cb57145ced14a62e91c345a33dfbcc7c78d1868e29c

    • SHA512

      8ebcdabadaffce7b5bd5e9aea2e3f97680f22ff2affdc1ded3c1c8f2fb4b6b447556c2c220c72178e9d0151cec8f102f9bbddf61bbbbe5ac74a983b6095ae2e4

    • SSDEEP

      12288:ZWreCfp5fwQb45fwPPh2kkkkK4kXkkkkkkkkl888888888888888888nusMH0Qiq:DCfp5fB45foPh2kkkkK4kXkkkkkkkkhs

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks