Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
10/05/2024, 14:42
General
-
Target
044896a82b350d7f7b89bc4565512a40_NeikiAnalytics.exe
-
Size
19KB
-
MD5
044896a82b350d7f7b89bc4565512a40
-
SHA1
65c34a86afc988df6b9c303196d77816dccf10fa
-
SHA256
2f1cf696b724b06d7cf214666d49741b09fbfe3800e66af0ab625e52afc94403
-
SHA512
7a4085c5203ea0265a3126081b3c95f3a1772b7217b55b62c77a7e4911f16ca87bd18e05227c2d9d47d9885410c5b48a8948acd0019e0d54c6d735552589ada4
-
SSDEEP
192:iV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2cjMAQnWF8qa1Dojjgi:sqaCF31cix+Dc4zjsAtFF46gi
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://172.20.10.5:1234/mXb6
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET CLR 2.0.50727)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\044896a82b350d7f7b89bc4565512a40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\044896a82b350d7f7b89bc4565512a40_NeikiAnalytics.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB