Overview

overview

10

Static

static

3

7e0b9a7211...cs.exe

windows7-x64

1

7e0b9a7211...cs.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-05-2024 04:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7e0b9a72110c88c5c72bb39e84e96750_NeikiAnalytics.exe

  • Size

    990KB

  • MD5

    7e0b9a72110c88c5c72bb39e84e96750

  • SHA1

    80e3d25ddd63ea867b5725f092b3749017d6a3f9

  • SHA256

    6b1fb441ddd8073c41cd0dc98d0be31975daae13fa51ae82d7bec8499fa62ccd

  • SHA512

    8f28c6c91fbd653d667c1c2c642e3e3e1a57e672a0c106239944b5e0cc6eddb27fc8838fc96f8d9c8bacf8581934cdbda568061c7f4e0c55bc3491117bf9bc98

  • SSDEEP

    12288:ikHizIRXKphzFpxvbg+4GAWpbFvpFFzdH9zzB5Fa7Jz9tctjs3h:i8izgKTzFpxL9F39B675fcF6

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.10.16.14:9001

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

Processes

  • C:\Users\Admin\AppData\Local\Temp\7e0b9a72110c88c5c72bb39e84e96750_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\7e0b9a72110c88c5c72bb39e84e96750_NeikiAnalytics.exe"
    1⤵
      PID:3652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3652-0-0x0000018B49310000-0x0000018B49311000-memory.dmp
      Filesize

      4KB

      Download