Overview

overview

7

Static

static

3

1eb7892c7b...cs.exe

windows7-x64

7

1eb7892c7b...cs.exe

windows10-2004-x64

7

$PLUGINSDIR/Cams.exe

windows7-x64

1

$PLUGINSDIR/Cams.exe

windows10-2004-x64

1

$PLUGINSDI...re.dll

windows7-x64

1

$PLUGINSDI...re.dll

windows10-2004-x64

1

$PLUGINSDI...ms.dll

windows7-x64

1

$PLUGINSDI...ms.dll

windows10-2004-x64

1

$PLUGINSDI...pf.dll

windows7-x64

1

$PLUGINSDI...pf.dll

windows10-2004-x64

1

$PLUGINSDI...er.dll

windows7-x64

1

$PLUGINSDI...er.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1eb7892c7bd92c7951aeb71c5a9e0570_NeikiAnalytics.exe

  • Size

    258KB

  • Sample

    240522-fmtscacg9t

  • MD5

    1eb7892c7bd92c7951aeb71c5a9e0570

  • SHA1

    20992593c1e4453945dac242052c478b5a09956d

  • SHA256

    ebd576e3007dc13a725a446d3d00f5dd8c68e2d07dd752638cdbb88a5c32bc09

  • SHA512

    c099cfe899a21d5cbd529e2181161e9e77c9c439d2ff57ffa770cac918139436acbc3ea0ba1f30e202d761576a3c7dce934e5540ebe418f53be165e1015f6528

  • SSDEEP

    6144:yGpoYwk4prlNyIuvrhVgSV/aPj2iiibLmQOYK1lF:yGWkMiv1VgS/AZ9OYWL

Score
7/10

Malware Config

Targets

    • Target

      1eb7892c7bd92c7951aeb71c5a9e0570_NeikiAnalytics.exe

    • Size

      258KB

    • MD5

      1eb7892c7bd92c7951aeb71c5a9e0570

    • SHA1

      20992593c1e4453945dac242052c478b5a09956d

    • SHA256

      ebd576e3007dc13a725a446d3d00f5dd8c68e2d07dd752638cdbb88a5c32bc09

    • SHA512

      c099cfe899a21d5cbd529e2181161e9e77c9c439d2ff57ffa770cac918139436acbc3ea0ba1f30e202d761576a3c7dce934e5540ebe418f53be165e1015f6528

    • SSDEEP

      6144:yGpoYwk4prlNyIuvrhVgSV/aPj2iiibLmQOYK1lF:yGWkMiv1VgS/AZ9OYWL

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Cams.exe

    • Size

      18KB

    • MD5

      46a9084ee063247d39be732ad62530c3

    • SHA1

      5c0eefe88ed45940a69427a0bafba088ba7b20a7

    • SHA256

      b435f4f5ebd5d1b2a146770b8e3de934bba18f7cda865fb935f5cb8158e13ce3

    • SHA512

      aa80ce522d06d2f67d308fd350ef062e95553089bcfc3d222f5f55ed1c4be263804d7b3b3c60a1caeb6a802c846d9df0fa201edd870f82f85cf7daeea29d19ce

    • SSDEEP

      384:yQ70+Pkkkk00thpXpfNgDutulJa7+bIhFg8nF4ry4ta9Ehv45aJcRAnn+xUtTj:r1Pkkkk00thRZtulexhFZwy0a9qSaJQ2

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/Microsoft.Web.WebView2.Core.dll

    • Size

      268KB

    • MD5

      cd1647080f6ed930927763ced34e953a

    • SHA1

      a6c6bee60f0526961bea39b607a291536d5ff52c

    • SHA256

      2499aa531037203d2a81698ce6aa0098f355e98fef1e62fec110e89e0b830bd4

    • SHA512

      44a7830a1819d6d8284d5391c2c1c5acd98681cb606d5ca6c4e56ba87721ac753f7d7b8058c79d5a388fef0ad91beba4f2ed4d397d612dd316ec6b19d700a4b3

    • SSDEEP

      6144:liQL/+gN6AMIh/heR9pRFIEIEEICepM1S2LQQs1hP09IEeCk61hLvhP/SO0YO9fN:FwAfhpeR9pRFIEIEEICepM1S2LQQs1hz

    Score
    1/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Microsoft.Web.WebView2.WinForms.dll

    • Size

      32KB

    • MD5

      4232ac1b301b5b7604ccc55dec303a79

    • SHA1

      f042093abe2d1787a66a94db68aaa059482276b6

    • SHA256

      f674d0347bbb90d65f577b74c8bc0375319ada72ec5110b87683a68b7c6e3886

    • SHA512

      eb1b926aff6a4f14b114ecee37c03a54367e6b4426fd93822882a7938905ca6afd4c45eb60a7bd9e0a2cf72694e092899887ee978b4f6628cba45a18149148ff

    • SSDEEP

      768:8W8ALuCldJ6W6RtHZDgcUN5P4JVrnh2jwSvsuTv1JKa5/Zi/6LkuboOzd2nLAAaE:n8Ay+dM9tHZDgcUN5P4JVrnawSvsu718

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/Microsoft.Web.WebView2.Wpf.dll

    • Size

      38KB

    • MD5

      a4bb580e9b2fff5b90daf6539db212cf

    • SHA1

      88d189915749576eb7bf957032e24f66dc3fbfa9

    • SHA256

      53f1936edd8650659349fa9d0d5182f5f849ee60dfcda3cfb46de99c1676cba2

    • SHA512

      8759945556ef5cac6d55e013f7ed441682e51861629dc649a2c2fa2821dc280692251b0700dccea1193c92fe53c1ca5c74f16537b3b1e798198403c5b415474a

    • SSDEEP

      768:58yYWCsRw80C3/KEWA+a1K8wDP/ryER0mBO4JVrDXh2jUfUPLkq7FKKa5/Bi/hGz:ObOw80Y/mSK8wDP/ryER0mBO4JVrDXay

    Score
    1/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/WebView2Loader.dll

    • Size

      135KB

    • MD5

      bceebc73cb9e3f239b99575c0d38951c

    • SHA1

      d71033e74b44ae5584b6be1d4cc99e4094f5aadf

    • SHA256

      f86b7be36295297de21bffccfde3cef776e175478592b4b16c3063b420723312

    • SHA512

      2cac4b095a46ab625ba7e4c9297133df1ccf3e87eb45938fc65c3ffe6cac31204229f3f4cedc6e58244bf74c76fbe9f2fda7710c784c79814e5ee2ccfb1994e7

    • SSDEEP

      3072:Wgr7UX5RelwF0r8VjiDreFeQV9g3esATVEt6mpoP7GwlYWLk:NwF0rM+DS8QbEtlyP7Gb

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks