Overview

overview

6

Static

static

3

0272e1cd91...cs.exe

windows7-x64

3

0272e1cd91...cs.exe

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/LogEx.dll

windows7-x64

3

$PLUGINSDIR/LogEx.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows7-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDI...es.txt

windows7-x64

1

$PLUGINSDI...es.txt

windows10-2004-x64

1

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$_6_/$R0.dll

windows7-x64

6

$_6_/$R0.dll

windows10-2004-x64

6

$_6_/mystarttb.dll

windows7-x64

6

$_6_/mystarttb.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    0272e1cd910e40d43b2f123db668b710_NeikiAnalytics.exe
  • Size 5.2MB
  • Sample240525-ravpnafd96
  • SHA256 492df6f4fc4b890b577cce8dc7b96746f5b78d556946343ab85faca9174a6761
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
adwarestealer

Malware Config

Targets

    • Target
      0272e1cd910e40d43b2f123db668b710_NeikiAnalytics.exe
    • Size 5.2MB
    • SHA256 492df6f4fc4b890b577cce8dc7b96746f5b78d556946343ab85faca9174a6761
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/ButtonEvent.dll
    • Size 10KB
    • SHA256 85c1e40bc78380f478fd38d4dc02e862f61d972f79b934d2d0a73f2f86f1afab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/LogEx.dll
    • Size 44KB
    • SHA256 f6d21ef2fa853b922c94d66d3abd9277ad71bc1be73a8d8418bc06635925a343
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral10behavioral9
    • Target
      $PLUGINSDIR/UAC.dll
    • Size 16KB
    • SHA256 9f47ec720d74e538bbc8d0c1118efcbc52e52050dbe98c27029fc35329996f7c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral11behavioral12
    • Target
      $PLUGINSDIR/features.txt
    • Size 704B
    • SHA256 b715f4747f10f8e51334510461889198c66347346229f3f8689b0bcd8caaf8e8
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral13behavioral14
    • Target
      $PLUGINSDIR/nsProcess.dll
    • Size 4KB
    • SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral15behavioral16
    • Target
      $_6_/$R0
    • Size 536KB
    • SHA256 d198cf9a5e0f9933f5ddddcc289ba9364e4226dcee12d8210875a7ed4dae59e7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    adwarestealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral17behavioral18
    • Target
      $_6_/mystarttb.dll
    • Size 536KB
    • SHA256 d198cf9a5e0f9933f5ddddcc289ba9364e4226dcee12d8210875a7ed4dae59e7
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    adwarestealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks