Overview

overview

10

Static

static

3

eda0a5dea6...KI.exe

windows7-x64

10

eda0a5dea6...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eda0a5dea6e99cde6af992663125eb2e_NEIKI

  • Size

    488KB

  • Sample

    240509-pwmvtsaa7y

  • MD5

    eda0a5dea6e99cde6af992663125eb2e

  • SHA1

    9dabced2e9b89d89cade334efe2f02cff24cc98b

  • SHA256

    c52e6e08c0e75be0aab3688524226ba7d3a1b581cb95a548f24d74d822a684fc

  • SHA512

    4815447de00072504fda19df942f4a416d071c0ee1a393593a1ef1f3a70eec2732ae34ed8c68dfc2fa92e35fa50fa798d09ba1d4315446c077ddb4e4dcea4126

  • SSDEEP

    6144:QHoUhq/b9v5GgbFzoBn/TNId/1fon/T2oI0YokOsfY7Uon2KO:QHThq/b9v5BMNIVy2oIvPKiKO

Score
10/10
persistence

Malware Config

Targets

    • Target

      eda0a5dea6e99cde6af992663125eb2e_NEIKI

    • Size

      488KB

    • MD5

      eda0a5dea6e99cde6af992663125eb2e

    • SHA1

      9dabced2e9b89d89cade334efe2f02cff24cc98b

    • SHA256

      c52e6e08c0e75be0aab3688524226ba7d3a1b581cb95a548f24d74d822a684fc

    • SHA512

      4815447de00072504fda19df942f4a416d071c0ee1a393593a1ef1f3a70eec2732ae34ed8c68dfc2fa92e35fa50fa798d09ba1d4315446c077ddb4e4dcea4126

    • SSDEEP

      6144:QHoUhq/b9v5GgbFzoBn/TNId/1fon/T2oI0YokOsfY7Uon2KO:QHThq/b9v5BMNIVy2oIvPKiKO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks