Overview

overview

7

Static

static

3

e1fa854bcf...cs.exe

windows7-x64

7

e1fa854bcf...cs.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDIR/EULA.rtf

windows7-x64

4

$PLUGINSDIR/EULA.rtf

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

$TEMP/tubb...pc.exe

windows7-x64

4

$TEMP/tubb...pc.exe

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    e1fa854bcf3698d171a4ca0cfd367080_NeikiAnalytics

  • Size

    746KB

  • MD5

    e1fa854bcf3698d171a4ca0cfd367080

  • SHA1

    70732dc62b5a8aa16e20a48debb1224d47b4b857

  • SHA256

    5a390344878f8c499ad811a7d60cfb46af6c9fd84b8f99810a8b9bd660603ce5

  • SHA512

    8cf93e73f82d9143573f90eadf9227eb3a0b2183f1a3dd4ec7677ae6be9415cbf2fe82f2e2134f18ee979856a9454d47b4632262bf1132f70bcef72766f6c671

  • SSDEEP

    12288:CCnKPUYgtVwNkbf/cJfc8vy4hDVyskkiP7sKTSGI0e8WzsNxuhYmM85PqjVC0D89:CCnKPLgtVwGbHc+86IrziP7sKTSR/8dq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • e1fa854bcf3698d171a4ca0cfd367080_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/EULA.rtf
    .rtf
  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSISdl.dll
    .dll windows:4 windows x86 arch:x86

    9cce555dd3ff1b6c7dc92d64c794c51a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ZipDLL.dll
    .dll windows:4 windows x86 arch:x86

    f10b94e3705eae25c7617ba56a648b77


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/amw.jpg
  • $PLUGINSDIR/babylon.jpg
  • $PLUGINSDIR/inetc.dll
    .dll windows:4 windows x86 arch:x86

    e886a412cdaf11998a8eeffda508e913


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d83f71e61ee459ee63ca3e829966a9dc


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/xml.dll
    .dll windows:4 windows x86 arch:x86

    b5ed5b3a951d4443ce56e5453702d536


    Headers

    Imports

    Exports

    Sections

  • $TEMP/tubbies_new_pc.exe
    .exe windows:4 windows x86 arch:x86

    375e99c150899f4a1953b1fbd5bea5aa


    Headers

    Imports

    Sections