Overview

overview

10

Static

static

3

1e64cf37bb...KI.exe

windows7-x64

10

1e64cf37bb...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e64cf37bb8ce6314a08570594bffe3c_NEIKI

  • Size

    280KB

  • Sample

    240509-pmah5scc46

  • MD5

    1e64cf37bb8ce6314a08570594bffe3c

  • SHA1

    acec2d70675fb720441c77b90bf52f0310712dcc

  • SHA256

    dc0fde9495e243517ea2ad5e2e1bde5ced1093c5e39307e2ffee02ebbfca172f

  • SHA512

    4b34f20ba7da3429799d299f941bbe2f3216a195a6c33157b584b6fc17812359740d3fb5b373fe96735bc7cee64cf1c7fffb38d3e2a3de66800dbdb03a3d286c

  • SSDEEP

    6144:rSgQZy8xWYLYi/GOORjMmRUoooooooooooooooooooooooooy/G3:rzQLxWYUi//OVLCoooooooooooooooom

Score
10/10
persistence

Malware Config

Targets

    • Target

      1e64cf37bb8ce6314a08570594bffe3c_NEIKI

    • Size

      280KB

    • MD5

      1e64cf37bb8ce6314a08570594bffe3c

    • SHA1

      acec2d70675fb720441c77b90bf52f0310712dcc

    • SHA256

      dc0fde9495e243517ea2ad5e2e1bde5ced1093c5e39307e2ffee02ebbfca172f

    • SHA512

      4b34f20ba7da3429799d299f941bbe2f3216a195a6c33157b584b6fc17812359740d3fb5b373fe96735bc7cee64cf1c7fffb38d3e2a3de66800dbdb03a3d286c

    • SSDEEP

      6144:rSgQZy8xWYLYi/GOORjMmRUoooooooooooooooooooooooooy/G3:rzQLxWYUi//OVLCoooooooooooooooom

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks