Overview

overview

10

Static

static

3

aa617f4d9a...KI.exe

windows7-x64

10

aa617f4d9a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa617f4d9a6c2525f8160371f3bd01df_NEIKI

  • Size

    335KB

  • Sample

    240509-psz1zscf96

  • MD5

    aa617f4d9a6c2525f8160371f3bd01df

  • SHA1

    42d8803e5fbbbe191b70ae4a419873f26fa03cda

  • SHA256

    c0bbd79dec194270293700d9b1dc64ed5a7afd64667fddbc6c4ac566cc93a448

  • SHA512

    6f15a4c384edc53e3c5059b6fc9fbf1a0f9c74dd5206d41e5bad3570f261dd06bea15c69914ee06fb7267e5e0ec8d025712487ca2fc18d90d485dc03838be39d

  • SSDEEP

    6144:+nTLEC0vLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:+nTLm

Score
10/10
persistence

Malware Config

Targets

    • Target

      aa617f4d9a6c2525f8160371f3bd01df_NEIKI

    • Size

      335KB

    • MD5

      aa617f4d9a6c2525f8160371f3bd01df

    • SHA1

      42d8803e5fbbbe191b70ae4a419873f26fa03cda

    • SHA256

      c0bbd79dec194270293700d9b1dc64ed5a7afd64667fddbc6c4ac566cc93a448

    • SHA512

      6f15a4c384edc53e3c5059b6fc9fbf1a0f9c74dd5206d41e5bad3570f261dd06bea15c69914ee06fb7267e5e0ec8d025712487ca2fc18d90d485dc03838be39d

    • SSDEEP

      6144:+nTLEC0vLvwU/4qwvwU/4qvvwevwU/4q+vwk/4q7:+nTLm

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks