Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
07-05-2024 21:05
Behavioral task
behavioral1
Sample
3348657f7ad964b85db6a686e4456ec0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3348657f7ad964b85db6a686e4456ec0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
3348657f7ad964b85db6a686e4456ec0_NEIKI.exe
-
Size
72KB
-
MD5
3348657f7ad964b85db6a686e4456ec0
-
SHA1
029a8d5f3934843651b85890fb66093cffb881ee
-
SHA256
0b98520a8c2b1dc7dda9818186deeb2c761a9eba9ce94f3513c4838afa55046c
-
SHA512
b08c13cffd7ca2bdc74717ee31a8ec90ea08b5f4b1918f4501b3b91fe9fcb6bbb7e751cbe8023e17b5ab766dedf1c5ee67b6390bd438ccc884f7591cb6dfeb25
-
SSDEEP
1536:I1rqyNhbcktu/0y9dJJMb+KR0Nc8QsJq39:or1NJc2u8yfJJe0Nc8QsC9
Malware Config
Extracted
metasploit
encoder/fnstenv_mov
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2440-0-0x0000000000490000-0x0000000000491000-memory.dmpFilesize
4KB