General

  • Target

    d050516e8f8a85ce49f3931328cd7b00_NeikiAnalytics

  • Size

    72KB

  • Sample

    240515-nt9fdafh48

  • MD5

    d050516e8f8a85ce49f3931328cd7b00

  • SHA1

    ac74fd81fbcac5ce217ff8bb00775c2ffa431d0e

  • SHA256

    7f6188192087151afd70ee3ba7e214a9143663c3b73f2a3aa473db7d7d945e8e

  • SHA512

    204ca7095d7fba3d198ead86076d45367ff41dcfad4800caf7acbb30a8f01d20632c1adff238aaf1b6a02895ba7bce8b46eda55ce6879dce3a9b89f5f08801a7

  • SSDEEP

    1536:IdLXW9g4UwBrmHhgbLrkqvr+vW4Mb+KR0Nc8QsJq39:8LSHLrk7vW4e0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

188.242.176.217:50933

Targets

    • Target

      d050516e8f8a85ce49f3931328cd7b00_NeikiAnalytics

    • Size

      72KB

    • MD5

      d050516e8f8a85ce49f3931328cd7b00

    • SHA1

      ac74fd81fbcac5ce217ff8bb00775c2ffa431d0e

    • SHA256

      7f6188192087151afd70ee3ba7e214a9143663c3b73f2a3aa473db7d7d945e8e

    • SHA512

      204ca7095d7fba3d198ead86076d45367ff41dcfad4800caf7acbb30a8f01d20632c1adff238aaf1b6a02895ba7bce8b46eda55ce6879dce3a9b89f5f08801a7

    • SSDEEP

      1536:IdLXW9g4UwBrmHhgbLrkqvr+vW4Mb+KR0Nc8QsJq39:8LSHLrk7vW4e0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks