Overview

overview

10

Static

static

3

c30942f733...cs.dll

windows7-x64

10

c30942f733...cs.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c30942f733999b08c18bd383bcf447a0_NeikiAnalytics.exe

  • Size

    9KB

  • Sample

    240517-hc395seb72

  • MD5

    c30942f733999b08c18bd383bcf447a0

  • SHA1

    e1ad001447c5b123c3040991c39430811102f871

  • SHA256

    183f0325d0d63a236408a163df94e07dc9e2702c7a868a7df4c472ce1d33bade

  • SHA512

    f3e57e86a9c45d053f5eab26021c152de8db1f752d756a77087adbbf83adf5a2ec68881ed86491bcea17d417c2ae83d64f093d044782c4fda77de4d033ee1657

  • SSDEEP

    192:O6S28Xed66b9hYuWJuOLjjOM553M0xQN:Z8Ob9CJuOLjjfv

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/download_exec

C2

http://192.168.3.128:443/api/artical/product/hot

Targets

    • Target

      c30942f733999b08c18bd383bcf447a0_NeikiAnalytics.exe

    • Size

      9KB

    • MD5

      c30942f733999b08c18bd383bcf447a0

    • SHA1

      e1ad001447c5b123c3040991c39430811102f871

    • SHA256

      183f0325d0d63a236408a163df94e07dc9e2702c7a868a7df4c472ce1d33bade

    • SHA512

      f3e57e86a9c45d053f5eab26021c152de8db1f752d756a77087adbbf83adf5a2ec68881ed86491bcea17d417c2ae83d64f093d044782c4fda77de4d033ee1657

    • SSDEEP

      192:O6S28Xed66b9hYuWJuOLjjOM553M0xQN:Z8Ob9CJuOLjjfv

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks