General

  • Target

    2f611fd997cceb1bdb2a998808624ff0_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240516-zjghdsfe8s

  • MD5

    2f611fd997cceb1bdb2a998808624ff0

  • SHA1

    dc3fd99e4577b3d268211e2c17fc50028e2dc8b2

  • SHA256

    828b3e23be76c7dd491d3c1917d6dfafc9964fc3de518bdbce96cf8a3c40154d

  • SHA512

    9fe9933abedc882d3a16658f0083a73a5dabbcda8117c21c4bdfdfd3b1205923334f10a7897a2de889b3231520eb28626ea25614570cef952d1a66e607a11095

  • SSDEEP

    1536:IRKGJs9ZA19qFy6K/NdgjQknPnQuEvMb+KR0Nc8QsJq3g:rGA+eecjVnhEve0Nc8QsCg

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:123

Targets

    • Target

      2f611fd997cceb1bdb2a998808624ff0_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      2f611fd997cceb1bdb2a998808624ff0

    • SHA1

      dc3fd99e4577b3d268211e2c17fc50028e2dc8b2

    • SHA256

      828b3e23be76c7dd491d3c1917d6dfafc9964fc3de518bdbce96cf8a3c40154d

    • SHA512

      9fe9933abedc882d3a16658f0083a73a5dabbcda8117c21c4bdfdfd3b1205923334f10a7897a2de889b3231520eb28626ea25614570cef952d1a66e607a11095

    • SSDEEP

      1536:IRKGJs9ZA19qFy6K/NdgjQknPnQuEvMb+KR0Nc8QsJq3g:rGA+eecjVnhEve0Nc8QsCg

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks