General

  • Target

    dfcfa294b9e90c3fd118b82e8f2429a0_NeikiAnalytics

  • Size

    7KB

  • Sample

    240516-qblygaed93

  • MD5

    dfcfa294b9e90c3fd118b82e8f2429a0

  • SHA1

    25b11aa8d78810c52095b42d3743901057390f28

  • SHA256

    b1a27e7cb108138bf1cd79d01fa1ae46e4d20183e4e60a5dab72235136b544a6

  • SHA512

    e5643a6d53742ef6b280cfd8fc047b237da8e8d6ddca4d54471f34901fe9dd001922df49e3b9a25dde2ce40050305091ef3acc626d00c37ab2d44a70bac05ed5

  • SSDEEP

    24:eFGStrJ9u0/6A/nZdkBQAVbc/wKLqweNDMSCvOXpmB:is01bkBQHoQSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

172.16.21.250:4444

Targets

    • Target

      dfcfa294b9e90c3fd118b82e8f2429a0_NeikiAnalytics

    • Size

      7KB

    • MD5

      dfcfa294b9e90c3fd118b82e8f2429a0

    • SHA1

      25b11aa8d78810c52095b42d3743901057390f28

    • SHA256

      b1a27e7cb108138bf1cd79d01fa1ae46e4d20183e4e60a5dab72235136b544a6

    • SHA512

      e5643a6d53742ef6b280cfd8fc047b237da8e8d6ddca4d54471f34901fe9dd001922df49e3b9a25dde2ce40050305091ef3acc626d00c37ab2d44a70bac05ed5

    • SSDEEP

      24:eFGStrJ9u0/6A/nZdkBQAVbc/wKLqweNDMSCvOXpmB:is01bkBQHoQSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks