Behavioral task
behavioral1
Sample
9fb5f15b04cb8389481a350d448bb650_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9fb5f15b04cb8389481a350d448bb650_NeikiAnalytics.pdf
Resource
win10v2004-20240426-en
General
-
Target
9fb5f15b04cb8389481a350d448bb650_NeikiAnalytics
-
Size
4.8MB
-
MD5
9fb5f15b04cb8389481a350d448bb650
-
SHA1
d0d8a2b8a299b3f31f48d95b04dbe507805d79d0
-
SHA256
9522852e533f5f2a90811fa8dc3c4de7d19dd0b4877ed7bac01ff67bf50f5d51
-
SHA512
940726942057045ea9519b60e3dacbd3703d61607c5f2637f531a812f04ad12f922fee9f892981c97100824eec86aad304f77747deaa6ad1c5c181c13bedc9b4
-
SSDEEP
49152:FdK84S4AOqB49UVKi+VeIB8+ffb8wK932QlOTaF6eBwHAzWzuORFi8wvuQysv1ha:fTOqW6Qr8wPdTDeCHASwosm/
Malware Config
Signatures
Files
-
9fb5f15b04cb8389481a350d448bb650_NeikiAnalytics.pdf
-
http://device.zip
-
http://ysoserial.net
-
https://censys.io/
-
https://claroty.com/2020/04/27/critical-infrastructure-attack-attempted-against-israeli-water-supply/
-
https://claroty.com/2020/11/10/blog-research-schneider-m221-plcs/
-
https://claroty.com/2021/03/23/blog-research-vulnerabilities-in-tbox-rtus/
-
https://claroty.com/team82/blog/critical-authentication-bypass-in-rockwell-software
-
https://claroty.com/team82/blog/from-project-file-to-code-execution-exploiting-vulnerabilities-in-xinje-plc-program-tool
-
https://conferences.computer.org/sp/pdfs/spw/2021/893400a383.pdf
-
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26507
-
https://digitalsupport.ge.com/servlet/fileField?retURL=%2Fapex%2FKnowledgeDetail%3Fid%3DkA31A000000TcdRSAS%26lang%3Den_US%26Type%3DDocumentation__kav&entityId=ka31A000000HCPRQA4&field=File_1__Body__s
-
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-02
-
https://download.schneider-electric.com/files?p_enDocType=Catalog&p_File_Name=DIA6ED2110104EN.pdf&p_Doc_Ref=DIA6ED2110104EN&_ga=2.246448193.458659450.1657211845-1362006569.1656587529
-
https://emerson-mas.force.com/communities/en_US/Article/Evil-PLC-Attack-Weaponizing-PLCs
-
https://en.wikipedia.org/wiki/IEC_61131-3
-
https://en.xinje.com/
-
https://en.xinje.com/enxj_product_detail/enxj_xlxl.html
-
https://github.com/pwntester/ysoserial.net
-
https://literature.rockwellautomation.com/idc/groups/literature/documents/at/secure-at001_-en-p.pdf
-
https://ovarro.com/en/europe/solutions/monitoring--control-devices/rtus/tbox/
-
https://support.industry.siemens.com/cs/document/109784438/delivery-release-tia-portal-v17?dti=0&lc=en-US
-
https://www.br-automation.com/downloads_br_productcatalogue/assets/1640529306294-en-original-1.0.pdf
-
https://www.br-automation.com/en/products/plc-systems/x20-system/
-
https://www.cisa.gov/shields-up
-
https://www.cisa.gov/uscert/ics/advisories/icsa-21-133-01
-
https://www.cisa.gov/uscert/ics/advisories/icsa-22-025-01
-
https://www.cisa.gov/uscert/ncas/alerts/aa20-205a
-
https://www.csd.uoc.gr/~hy561/Data/Papers/xmill-sigmod00.pdf
-
https://www.cve.org/CVERecord?id=CVE-2021-34605
-
https://www.emerson.com/en-us/automation/control-and-safety-systems/pacsystems
-
https://www.emerson.com/en-us/automation/control-and-safety-systems/pacsystems#:~:text=Emerson's%20PACSystems%20solutions%20are%20designed,control%20system%20and%20cause%20damage.
-
https://www.forescout.com/resources/ot-icefall-report/
-
https://www.ge.com/gas-power/products/digital-and-controls/mark-vie-ecosystem
-
https://www.ge.com/gas-power/products/digital-and-controls/mark-vie-ecosystem/mark-vie-control-st-software-suite
-
https://www.ovarro.com/content-media/assigned/102049/TBOX-SA-2021-0009_1.1.pdf
-
https://www.rockwellautomation.com/en-hu/products/hardware/allen-bradley/programmable-controllers/micro-controllers/micro800-family/micro800-training-videos.html
-
https://www.rockwellautomation.com/en-il/capabilities/industrial-automation-control/design-and-configuration-software.html
-
https://www.rockwellautomation.com/en-il/capabilities/industrial-automation-control/micro-control.html
-
https://www.rockwellautomation.com/en-il/products/hardware/allen-bradley/programmable-controllers/micro-controllers/micro800-family/micro820-controllers.html
-
https://www.se.com/ww/en/download/document/SEVD-2021-222-02/
-
https://www.se.com/ww/en/work/products/master-ranges/modicon/
-
https://www.shodan.io/
- Show all
-