General

  • Target

    66be2584def322d4d0c3cb02d9d38b90_NeikiAnalytics

  • Size

    2.3MB

  • MD5

    66be2584def322d4d0c3cb02d9d38b90

  • SHA1

    20b4eebd345da9799e8fe1992a93ea7c1d3b4d71

  • SHA256

    f6c9f74d9009fdcc43c998ac6b8f4d2ad8fe3cea8520f9cb663d004d348857de

  • SHA512

    5476ce76c7178b50d8ff9f2f6dfbdb5f74914cec4a87e036de67386dc1d0e9c576dcf7ae99f59842c212555f668f5339996db2bb814ac9a3acd9873d946a1072

  • SSDEEP

    24576:B/bBj/uOV2j94D++w0/dwnhc32/kroMiJ6ZMwPHBpLQOchCQbCeHSaOJ6R:rLuOwj949xoh0VG6ZnHOhYkA6R

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.139.43.172:80/oPrjVXU9qzkwazWqpFvt

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66be2584def322d4d0c3cb02d9d38b90_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections