Overview

overview

10

Static

static

3

ccfeb63c8a...KI.exe

windows7-x64

10

ccfeb63c8a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ccfeb63c8a8dd2e4dfe00bb6373a4246_NEIKI

  • Size

    60KB

  • Sample

    240509-pvbfeahh9y

  • MD5

    ccfeb63c8a8dd2e4dfe00bb6373a4246

  • SHA1

    ce791ac4e63f34ea84f0d9ea334863d69f370030

  • SHA256

    97458d4351ac23e77fd489beab54403ba2ec745c11a3d7824df801ee591b4362

  • SHA512

    eb5b418d6a9e503b542962b94ccc7a5b2ba26d0f62390c18965f3f22243847976935ea9a127cea899a4c23846195919e3def95956e2b85d65bfd775e2ab95450

  • SSDEEP

    1536:D+7/KZ/ccD48BjFCDiVQzLoAprwpYrLB86l1r:4Kp3D5VEiajpkpYLB86l1r

Score
10/10
persistence

Malware Config

Targets

    • Target

      ccfeb63c8a8dd2e4dfe00bb6373a4246_NEIKI

    • Size

      60KB

    • MD5

      ccfeb63c8a8dd2e4dfe00bb6373a4246

    • SHA1

      ce791ac4e63f34ea84f0d9ea334863d69f370030

    • SHA256

      97458d4351ac23e77fd489beab54403ba2ec745c11a3d7824df801ee591b4362

    • SHA512

      eb5b418d6a9e503b542962b94ccc7a5b2ba26d0f62390c18965f3f22243847976935ea9a127cea899a4c23846195919e3def95956e2b85d65bfd775e2ab95450

    • SSDEEP

      1536:D+7/KZ/ccD48BjFCDiVQzLoAprwpYrLB86l1r:4Kp3D5VEiajpkpYLB86l1r

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks