Overview

overview

7

Static

static

3

990c8438d1...cs.exe

windows7-x64

7

990c8438d1...cs.exe

windows10-2004-x64

7

$PLUGINSDI...ML.dll

windows7-x64

3

$PLUGINSDI...ML.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...os.dll

windows7-x64

3

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows7-x64

3

$PLUGINSDI...ON.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    990c8438d183d7b0e83de90e658b3620_NeikiAnalytics

  • Size

    431KB

  • Sample

    240510-hs1tyshb3s

  • MD5

    990c8438d183d7b0e83de90e658b3620

  • SHA1

    ecb25321206518c324d9fae3f3fce13eabe12a5b

  • SHA256

    9a5a2d3affee249a8d7b7e88d5160db66cc725a2c07328f4f1073c3a5b568861

  • SHA512

    811cea6be87e808649eba2ed7413be738fb53a92034f88a0b537e43718369f4746bca83ed467d9c7c321c87811b5c3887d7da90d329139e5d38b6349ce52f1b8

  • SSDEEP

    12288:eYOtWPmxG0x/WWTTOleWks8/G/8dfz/gw:+t0zwHT6lnNt8dfrg

Score
7/10
execution

Malware Config

Targets

    • Target

      990c8438d183d7b0e83de90e658b3620_NeikiAnalytics

    • Size

      431KB

    • MD5

      990c8438d183d7b0e83de90e658b3620

    • SHA1

      ecb25321206518c324d9fae3f3fce13eabe12a5b

    • SHA256

      9a5a2d3affee249a8d7b7e88d5160db66cc725a2c07328f4f1073c3a5b568861

    • SHA512

      811cea6be87e808649eba2ed7413be738fb53a92034f88a0b537e43718369f4746bca83ed467d9c7c321c87811b5c3887d7da90d329139e5d38b6349ce52f1b8

    • SSDEEP

      12288:eYOtWPmxG0x/WWTTOleWks8/G/8dfz/gw:+t0zwHT6lnNt8dfrg

    Score
    7/10
    execution

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/EmbedHTML.dll

    • Size

      99KB

    • MD5

      e2a9378cef6348b96ad09d774e2ee229

    • SHA1

      37f26323a43a926188b21b6897de59d5f9f22908

    • SHA256

      a384762ceb5b10ce0bca1b149f5ea5e85fdd1065a3c73ea229ad2da840f0d57d

    • SHA512

      7200e1c74b4bbf3df42cf8343009cdc25cd0f6366af1c91c9fc3d383841abc93ca02fedd37130d14d7c65644ce0bda827085188f40e9a71bdf9da3b6c94beec8

    • SSDEEP

      1536:tFgB2x1WGaHXiXkJ99GGHkNRcoK/qzs8jcdkIP+7tIEgKPammnE:tFgI3pIXiZNRJGko+5IEgKPammE

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/INetC.dll

    • Size

      21KB

    • MD5

      2b342079303895c50af8040a91f30f71

    • SHA1

      b11335e1cb8356d9c337cb89fe81d669a69de17e

    • SHA256

      2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f

    • SHA512

      550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47

    • SSDEEP

      384:KOoVVefeWsI7rsIquPLNN546o0Ac9khYLMkIX0+Gzyekv:4VVaeE7wIqyJN5i

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/IpConfig.dll

    • Size

      114KB

    • MD5

      a3ed6f7ea493b9644125d494fbf9a1e6

    • SHA1

      ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8

    • SHA256

      ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08

    • SHA512

      7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1

    • SSDEEP

      1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/MachineInfos.dll

    • Size

      1.0MB

    • MD5

      38706940e5cd5ae61b35c05591ffb44c

    • SHA1

      a0dd9bef49887ceaf3983055ee4955e572f13777

    • SHA256

      e8c5bd7535ef06ff3c8c99455438c6982b8a414c43b7d1bb47c55506d4d7adcf

    • SHA512

      e1328c481d82e59783515668a48a99b04aec75c4cc2d33e28a7d9a56f86ebcca7c3cbae4ee35b010724317ff9faa7d21770d17acede2bcfeec34366fc88945e4

    • SSDEEP

      12288:SJ5/Lq3w7VjWHPKJckWjbGii+uuk7g8caEW91yrB5Tk5MpW1rlVHZhW8:SBckWjo7aW91yrB5Tk5/1pVHS

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      fbe295e5a1acfbd0a6271898f885fe6a

    • SHA1

      d6d205922e61635472efb13c2bb92c9ac6cb96da

    • SHA256

      a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1

    • SHA512

      2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06

    • SSDEEP

      192:yPtkiQJr7V9r3Ftr87NfwXQ6whlgi62V7i77blbTc4DI:N7Vxr8IgLgi3sVc4

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab101f38562c8545a641e95172c354b4

    • SHA1

      ec47ac5449f6ee4b14f6dd7ddde841a3e723e567

    • SHA256

      3cdf3e24c87666ed5c582b8b028c01ee6ac16d5a9b8d8d684ae67605376786ea

    • SHA512

      72d4b6dc439f40b7d68b03353a748fc3ad7ed10b0401741c5030705d9b1adef856406075e9ce4f1a08e4345a16e1c759f636c38ad92a57ef369867a9533b7037

    • SSDEEP

      96:o3W4JlD3c151V1gQoE8cxM2DjDf3GEst+Nt+jvcx4K8qndYv0PLE:o3p3ggQF8REskpxZdO0PLE

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      50ba20cad29399e2db9fa75a1324bd1d

    • SHA1

      3850634bb15a112623222972ef554c8d1eca16f4

    • SHA256

      e7b145abc7c519e6bd91dc06b7b83d1e73735ac1ac37d30a7889840a6eed38fc

    • SHA512

      893e053fcb0a2d3742e2b13b869941a3a485b2bda3a92567f84190cb1be170b67d20cc71c6a2cb92f4202140c8afd9c40a358496947d709e0c4b68d43a368754

    • SSDEEP

      96:17GUxNkO6GR0t9GKKr1Zd8NHYVVHp4dEeY3kRnHdMqqyVgNT3e:5XhHR0aTQN4gRHdMqJVgNa

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/nsJSON.dll

    • Size

      22KB

    • MD5

      c8222584e91b74c47f5ce2a84d1cdc4f

    • SHA1

      750359dd536c840b1d4016826af7f34a8562e242

    • SHA256

      6785ab17a6c27be18072aa1c274078321b4ea27bfa752d3c882ec3093dc4637b

    • SHA512

      a89f0083c791e7d4d54fd728e848e44bd44ef9e11c799a48ab95a48d3c4e02e68699e28818c1232b694120973ac0c3e418740759830ef70d328d7ef9e5789f51

    • SSDEEP

      384:qdctoQMA9RtBHo45eqtTv/lddWUn89tNj5AYXqUYevrTZg9MyhTZrdSw:qFqRtBneqtTXldBn+tNDqqz1mMIrn

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/registry.dll

    • Size

      24KB

    • MD5

      2b7007ed0262ca02ef69d8990815cbeb

    • SHA1

      2eabe4f755213666dbbbde024a5235ddde02b47f

    • SHA256

      0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d

    • SHA512

      aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca

    • SSDEEP

      384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA

    Score
    3/10
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks