General

  • Target

    e694ddf1dbd378ad2ed0583927df5020_NeikiAnalytics

  • Size

    72KB

  • Sample

    240510-p4yx3aag99

  • MD5

    e694ddf1dbd378ad2ed0583927df5020

  • SHA1

    73124554e623d3eadfdcb35ba91d3f9f18732004

  • SHA256

    95fccb5ea0275001a401729a62972f93180efb266e6ced37014e4b27ff67ff4d

  • SHA512

    19be507123d5fb21500e40713d432aa5a7eecf7e3f0da9bcf3748064bd0e4c06924891c45acb9ce27c37ec061fa978ce11fd99a41c70e3eb4879a60a157d0a48

  • SSDEEP

    1536:IPtXoB0UMKurHa++gH6iXpOD+Y1m0ib5asKMb+KR0Nc8QsJq39:GtsMVrHa+tIKY1mJ5asKe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

200.66.43.158:38677

Targets

    • Target

      e694ddf1dbd378ad2ed0583927df5020_NeikiAnalytics

    • Size

      72KB

    • MD5

      e694ddf1dbd378ad2ed0583927df5020

    • SHA1

      73124554e623d3eadfdcb35ba91d3f9f18732004

    • SHA256

      95fccb5ea0275001a401729a62972f93180efb266e6ced37014e4b27ff67ff4d

    • SHA512

      19be507123d5fb21500e40713d432aa5a7eecf7e3f0da9bcf3748064bd0e4c06924891c45acb9ce27c37ec061fa978ce11fd99a41c70e3eb4879a60a157d0a48

    • SSDEEP

      1536:IPtXoB0UMKurHa++gH6iXpOD+Y1m0ib5asKMb+KR0Nc8QsJq39:GtsMVrHa+tIKY1mJ5asKe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks