Overview

overview

3

Static

static

3

57845c9ab3...cs.exe

windows7-x64

1

57845c9ab3...cs.exe

windows10-2004-x64

1

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ps.dll

windows7-x64

3

$PLUGINSDI...ps.dll

windows10-2004-x64

3

Default.exe

windows7-x64

1

Default.exe

windows10-2004-x64

1

Formats/7z.dll

windows7-x64

1

Formats/7z.dll

windows10-2004-x64

1

Formats/7zxa.dll

windows7-x64

1

Formats/7zxa.dll

windows10-2004-x64

1

Formats/UNACEV2.dll

windows7-x64

1

Formats/UNACEV2.dll

windows10-2004-x64

3

Formats/ace.dll

windows7-x64

3

Formats/ace.dll

windows10-2004-x64

3

Formats/arj.dll

windows7-x64

3

Formats/arj.dll

windows10-2004-x64

3

Formats/bz2.dll

windows7-x64

3

Formats/bz2.dll

windows10-2004-x64

3

Formats/cab.dll

windows7-x64

3

Formats/cab.dll

windows10-2004-x64

3

Formats/gz.dll

windows7-x64

3

Formats/gz.dll

windows10-2004-x64

3

Formats/iso.dll

windows7-x64

1

Formats/iso.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    57845c9ab3ecc80c3cec3a0347eef1b0_NeikiAnalytics

  • Size

    1.2MB

  • MD5

    57845c9ab3ecc80c3cec3a0347eef1b0

  • SHA1

    ec966270ed95f4a54c85f336c29425b349e06993

  • SHA256

    f4e5eca89979dc2ac434e657dc778bb12e5a2973fcba80d2517b74be4bd57a37

  • SHA512

    b8f61bc1c4d024c864fad4958ba78b834aba3a5f334c8676093d164381cf92c212fef1a90315a9449fe0b70082e15b059e6ca56c46fd9c2cc54d5330a425bede

  • SSDEEP

    24576:28A54NQYzvM+1c9ZB9GRdTgPI3TKUv39rSx:2t5YdvM+WZbAkP2m

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • 57845c9ab3ecc80c3cec3a0347eef1b0_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86

    55f3dfd13c0557d3e32bcbc604441dd3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    711c893e4d8189fd14b6563a4e35e663


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    946eb0a1e85c9ade4acaf634eb5a64f1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ToolTips.dll
    .dll windows:4 windows x86 arch:x86

    04338c58e26f4ac6ae89608ac6276429


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • Default.SFX
    .exe windows:4 windows x86 arch:x86

    bc5ce990cf54f8d435a68eb97512f73e


    Headers

    Imports

    Sections

  • Descript.ion
  • File_Id.diz
  • Formats/7z.fmt
    .dll windows:4 windows x86 arch:x86

    2baeded8e3dc4b121e617a68c55b679b


    Headers

    Imports

    Exports

    Sections

  • Formats/7zxa.dll
    .dll windows:4 windows x86 arch:x86

    3dc4afefc02cd881eb79acc807bf4bce


    Headers

    Imports

    Exports

    Sections

  • Formats/UNACEV2.DLL
    .dll windows:1 windows x86 arch:x86

    8390514c40641509cd0941c1fb7588ab


    Headers

    Imports

    Exports

    Sections

  • Formats/ace.fmt
    .dll windows:4 windows x86 arch:x86

    acc75099d837aeeea98da3dc177d0a46


    Headers

    Imports

    Exports

    Sections

  • Formats/arj.fmt
    .dll windows:4 windows x86 arch:x86

    28f181626d16c6bea7d6f565c73e29f4


    Headers

    Imports

    Exports

    Sections

  • Formats/bz2.fmt
    .dll windows:4 windows x86 arch:x86

    e57ce6794e90a7c0c4a9018adde3292d


    Headers

    Imports

    Exports

    Sections

  • Formats/cab.fmt
    .dll windows:4 windows x86 arch:x86

    5dcc48e7ea55c9b053c5f01b400bfac9


    Headers

    Imports

    Exports

    Sections

  • Formats/gz.fmt
    .dll windows:4 windows x86 arch:x86

    f227067221a23d2c6edff93f5c558c92


    Headers

    Imports

    Exports

    Sections

  • Formats/iso.fmt
    .dll windows:4 windows x86 arch:x86

    4b6840e9a61591ef9b6ff625fd52479f


    Headers

    Imports

    Exports

    Sections

  • Formats/lzh.fmt
    .dll windows:4 windows x86 arch:x86

    3680637ce7b88c59ae75090279661612


    Headers

    Imports

    Exports

    Sections

  • Formats/tar.fmt
    .dll windows:4 windows x86 arch:x86

    458623c0dd55570bfa4ee9e6ce342c4c


    Headers

    Imports

    Exports

    Sections

  • Formats/uue.fmt
    .dll windows:4 windows x86 arch:x86

    049d7da41713866dca59dc62ea0c5043


    Headers

    Imports

    Exports

    Sections

  • Formats/z.fmt
    .dll windows:4 windows x86 arch:x86

    f227067221a23d2c6edff93f5c558c92


    Headers

    Imports

    Exports

    Sections

  • License.txt
  • Order.htm
    .html .js polyglot
  • RAR.exe.bak
    .exe windows:4 windows x86 arch:x86

    ab369c4db94893cbae59850b1a0da0d4


    Headers

    Imports

    Exports

    Sections

  • Rar.exe
    .exe windows:4 windows x86 arch:x86

    ab369c4db94893cbae59850b1a0da0d4


    Headers

    Imports

    Exports

    Sections

  • Rar.txt
  • RarExt.dll
    .dll windows:4 windows x86 arch:x86

    03dc17bd3a57ac2349fc00288c2ae55f


    Headers

    Imports

    Exports

    Sections

  • RarExt64.dll
    .dll windows:4 windows x64 arch:x64

    7cfb181cdd03a8089bdd043557b8705e


    Headers

    Imports

    Exports

    Sections

  • RarExtLoader.exe
    .exe windows:4 windows x86 arch:x86

    5b0fc82d05ce78abc7d8de8277908ca1


    Headers

    Imports

    Exports

    Sections

  • RarFiles.lst
  • ReadMe.txt
  • TechNote.txt
  • UnRAR.exe
    .exe windows:4 windows x86 arch:x86

    6ead8cdd324aa83b32b7037bd7925408


    Headers

    Imports

    Exports

    Sections

  • Uninstall.lst
  • UnrarSrc.txt
  • WhatsNew.txt
  • WinCon.SFX
    .exe windows:4 windows x86 arch:x86

    e43dbd51cb6c9c0c6cc0789ce3d22677


    Headers

    Imports

    Sections

  • WinRAR.chm
    .chm
  • WinRAR.exe
    .exe windows:4 windows x86 arch:x86

    ad7d9d2ba8b191d67264494e50d82396


    Headers

    Imports

    Exports

    Sections

  • Zip.SFX
    .exe windows:4 windows x86 arch:x86

    c0e79495eea5ea137afed09deae06d3f


    Headers

    Imports

    Sections

  • rarnew.dat
    .rar
  • rarreg.key
  • setup.exe
    .exe windows:4 windows x86 arch:x86

    c61d8c850719ddcd92aa317807aae655


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    55f3dfd13c0557d3e32bcbc604441dd3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • zipnew.dat