Overview

overview

10

Static

static

3

0fc190a661...KI.exe

windows7-x64

10

0fc190a661...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fc190a6619ba8e0c9ade1f815cbe7d0_NEIKI

  • Size

    264KB

  • Sample

    240509-lrmsgsec66

  • MD5

    0fc190a6619ba8e0c9ade1f815cbe7d0

  • SHA1

    adad0665b14d12db85b83beb26c3169b2ca7a19a

  • SHA256

    f4d95cf19f873677341332d33aa8143a7b4810f47b55dbbf79c8651ef9a49b2d

  • SHA512

    7be8bc623e0484d1f1cb15d0b3430a157302433f043735d7157d622a8325933c5675a2b02a4fe5c6e8748e87e7f0956f9bdc253c65fc096a70cbbbf58b4a6d72

  • SSDEEP

    3072:qyy/d3OHY124ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFDrFA:qyAO46sFj5tPNki9HZd1sFj5tw

Score
10/10
persistence

Malware Config

Targets

    • Target

      0fc190a6619ba8e0c9ade1f815cbe7d0_NEIKI

    • Size

      264KB

    • MD5

      0fc190a6619ba8e0c9ade1f815cbe7d0

    • SHA1

      adad0665b14d12db85b83beb26c3169b2ca7a19a

    • SHA256

      f4d95cf19f873677341332d33aa8143a7b4810f47b55dbbf79c8651ef9a49b2d

    • SHA512

      7be8bc623e0484d1f1cb15d0b3430a157302433f043735d7157d622a8325933c5675a2b02a4fe5c6e8748e87e7f0956f9bdc253c65fc096a70cbbbf58b4a6d72

    • SSDEEP

      3072:qyy/d3OHY124ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho1mtye3lFDrFA:qyAO46sFj5tPNki9HZd1sFj5tw

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks