General

  • Target

    ef540510d57b1179eeacba22b07f3690_NeikiAnalytics.exe

  • Size

    72KB

  • MD5

    ef540510d57b1179eeacba22b07f3690

  • SHA1

    1c01d8bbbc3fee7545fa17d30ec49504f85f2aa1

  • SHA256

    ada24edf7de6b24246f1db57d276b94f2268ef6b8d2fa63ba808fb91329fee8b

  • SHA512

    b37ee609bfbcb8ad0ef4aef8de3b84eedd9103696851fc765d188439351063e17e0553b934743cf26b804acb2aaae0ab0e04d411f2bcfe359dfd0f3fd18bbdfd

  • SSDEEP

    1536:IBVmUzSoLVdlIGRlicW/GkLK93VVMb+KR0Nc8QsJq39:GzSiVdlIaKeVVe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.198:443

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef540510d57b1179eeacba22b07f3690_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections