Overview

overview

10

Static

static

10

db614ad0dc...cs.dll

windows7-x64

10

db614ad0dc...cs.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db614ad0dc792ff59940051142523290_NeikiAnalytics

  • Size

    20KB

  • Sample

    240516-myabeahd88

  • MD5

    db614ad0dc792ff59940051142523290

  • SHA1

    aab90bf3896b59cde9dd7b840b803e1955b01a82

  • SHA256

    32f5a91e7e7f6f4aa612e556857432ae478b7846096dde93e82cb94173477c39

  • SHA512

    f097ab021ff2fb813309ce5e3410bb8aa3d895d66420f34051711265a8145118ee3e47b619b711fff0195f32eead7d547c4c6b44650b21255fd0bb297afe6bcb

  • SSDEEP

    384:LGy6SckZA74a/aN/YJ6gWy3elSYZuP18celPSI:YSqkWMYiBX

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.83.136:4444

Targets

    • Target

      db614ad0dc792ff59940051142523290_NeikiAnalytics

    • Size

      20KB

    • MD5

      db614ad0dc792ff59940051142523290

    • SHA1

      aab90bf3896b59cde9dd7b840b803e1955b01a82

    • SHA256

      32f5a91e7e7f6f4aa612e556857432ae478b7846096dde93e82cb94173477c39

    • SHA512

      f097ab021ff2fb813309ce5e3410bb8aa3d895d66420f34051711265a8145118ee3e47b619b711fff0195f32eead7d547c4c6b44650b21255fd0bb297afe6bcb

    • SSDEEP

      384:LGy6SckZA74a/aN/YJ6gWy3elSYZuP18celPSI:YSqkWMYiBX

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks