Overview

overview

10

Static

static

10

29f63e7185...cs.exe

windows7-x64

10

29f63e7185...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29f63e718527671369b4967c9632db00_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240517-y2fs5sha3w

  • MD5

    29f63e718527671369b4967c9632db00

  • SHA1

    d6c812e4b8a78e8eb8e5c7105fad7d8485e2608e

  • SHA256

    f6b54cb269b41fb1c8e5338533e3b3a93552b219990836efc8a72341c79f14b4

  • SHA512

    e2f23e642c6f368b0f71c9b748ddcd582884e7aa10a4007752a567042f5d9b9e44d73cb44415d357a31d3f0958db5693aecb391e926aab7efad5fbc925bc28ea

  • SSDEEP

    1536:IdeGKbbfZuRB4ZFOP3JyQNcvTj3MPa0oJ6NgMb+KR0Nc8QsJq39:vbbhu4ZFOP3JyQN67MP06Nge0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.31:6060

Targets

    • Target

      29f63e718527671369b4967c9632db00_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      29f63e718527671369b4967c9632db00

    • SHA1

      d6c812e4b8a78e8eb8e5c7105fad7d8485e2608e

    • SHA256

      f6b54cb269b41fb1c8e5338533e3b3a93552b219990836efc8a72341c79f14b4

    • SHA512

      e2f23e642c6f368b0f71c9b748ddcd582884e7aa10a4007752a567042f5d9b9e44d73cb44415d357a31d3f0958db5693aecb391e926aab7efad5fbc925bc28ea

    • SSDEEP

      1536:IdeGKbbfZuRB4ZFOP3JyQNcvTj3MPa0oJ6NgMb+KR0Nc8QsJq39:vbbhu4ZFOP3JyQN67MP06Nge0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks