Overview
overview
7Static
static
7nEO iMAGIN...es.dll
windows7-x64
3nEO iMAGIN...es.dll
windows10-2004-x64
3nEO iMAGIN...or.htm
windows7-x64
1nEO iMAGIN...or.htm
windows10-2004-x64
1nEO iMAGIN...or.htm
windows7-x64
1nEO iMAGIN...or.htm
windows10-2004-x64
1nEO iMAGING/IJL15.dll
windows7-x64
1nEO iMAGING/IJL15.dll
windows10-2004-x64
1nEO iMAGIN...71.dll
windows7-x64
3nEO iMAGIN...71.dll
windows10-2004-x64
3nEO iMAGIN...71.dll
windows7-x64
3nEO iMAGIN...71.dll
windows10-2004-x64
3nEO iMAGIN...nt.dll
windows7-x64
1nEO iMAGIN...nt.dll
windows10-2004-x64
1nEO iMAGIN...ce.dll
windows7-x64
1nEO iMAGIN...ce.dll
windows10-2004-x64
1nEO iMAGIN...st.dll
windows7-x64
3nEO iMAGIN...st.dll
windows10-2004-x64
3nEO iMAGING/atl71.dll
windows7-x64
1nEO iMAGING/atl71.dll
windows10-2004-x64
1nEO iMAGIN...mm.dll
windows7-x64
3nEO iMAGIN...mm.dll
windows10-2004-x64
1nEO iMAGIN...ap.dll
windows7-x64
3nEO iMAGIN...ap.dll
windows10-2004-x64
3nEO iMAGIN...NG.exe
windows7-x64
1nEO iMAGIN...NG.exe
windows10-2004-x64
1nEO iMAGIN...c.html
windows7-x64
1nEO iMAGIN...c.html
windows10-2004-x64
1nEO iMAGIN...s1.dll
windows7-x64
1nEO iMAGIN...s1.dll
windows10-2004-x64
1nEO iMAGIN...s2.dll
windows7-x64
1nEO iMAGIN...s2.dll
windows10-2004-x64
1Analysis
-
max time kernel
143s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
22/07/2024, 23:56
Behavioral task
behavioral1
Sample
nEO iMAGING/BitMapRes.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
nEO iMAGING/BitMapRes.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
nEO iMAGING/DefaultPage/adError.htm
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
nEO iMAGING/DefaultPage/adError.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
nEO iMAGING/DefaultPage/error.htm
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
nEO iMAGING/DefaultPage/error.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
nEO iMAGING/IJL15.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
nEO iMAGING/IJL15.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
nEO iMAGING/MSVCP71.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
nEO iMAGING/MSVCP71.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
nEO iMAGING/MSVCR71.dll
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
nEO iMAGING/MSVCR71.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
nEO iMAGING/NeoAgent.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
nEO iMAGING/NeoAgent.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
nEO iMAGING/Resource.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
nEO iMAGING/Resource.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
nEO iMAGING/SiteList.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
nEO iMAGING/SiteList.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
nEO iMAGING/atl71.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
nEO iMAGING/atl71.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
nEO iMAGING/borlndmm.dll
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
nEO iMAGING/borlndmm.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
nEO iMAGING/easysnap.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
nEO iMAGING/easysnap.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
nEO iMAGING/nEOiMAGING.exe
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
nEO iMAGING/nEOiMAGING.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
nEO iMAGING/niIEMagic.html
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
nEO iMAGING/niIEMagic.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
nEO iMAGING/niUtils1.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
nEO iMAGING/niUtils1.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
nEO iMAGING/niUtils2.dll
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
nEO iMAGING/niUtils2.dll
Resource
win10v2004-20240709-en
General
-
Target
nEO iMAGING/nEOiMAGING.exe
-
Size
8.3MB
-
MD5
aa6d9207d72a0f6361c2dd00bcae85fb
-
SHA1
f090d97377c79c9d54e25dd74d14718e4b18dc91
-
SHA256
8b019b4c1dc46d082d964090e07a8ccb27df91c50846cad01daecad1b8b0c7d9
-
SHA512
5db85003da895a90d7890b4ed515d284ccdd0ffd3ed7be60ac4e9ae6bd98eb761bd7ce72df0f0e1f7274ed7bde9719f85f7d9ff242d53cbf93b5df4fe711d044
-
SSDEEP
98304:9pgrw+QA0Lx0GPG3sDz4QAq8VUFRonPJFv5CDC+JQBypcWw200/ueS2uquV/gB5R:9tFxL+3s2BhApu6cn/gB5R
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main nEOiMAGING.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2732 nEOiMAGING.exe 2732 nEOiMAGING.exe 2732 nEOiMAGING.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
672B
MD51e7ad375af5d47acbe29eb63292952b3
SHA125b613256f096046fc15e6e6ffb960fca3d322a1
SHA2565d2258eb1f513376605f3382d94da38a8312122ac842147e43d3525b8bca38a1
SHA51203be2f0567e011c6eb0091079838731ac27dbc985b8f3055e396abe11a1ada5554e0dd60644850edd6e0dc229abfe801cf60928f63b59115e8b13bbc0094bf68