Overview

overview

10

Static

static

3

d2c26bbcc3...cs.exe

windows7-x64

10

d2c26bbcc3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2c26bbcc3a4c8088a0853325d6ad1c0_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240518-q9t2qsef8w

  • MD5

    d2c26bbcc3a4c8088a0853325d6ad1c0

  • SHA1

    c5e6ba78fbbc665a9378487823400991945a7baf

  • SHA256

    f5c4cf726dc559044d62d9c0d45d5ad4f97de5038a9294665648676575391085

  • SHA512

    fdac41fdd37b9f53ea020f85699319f18b1019d878e4920c00bd6884e5aad3a7e35e5d25b06f4deceb69be6735a6fbefce70d07eadaec8b8b972ab9ad1ab1b44

  • SSDEEP

    1536:IxICYjg4WhiERP4KM6pM4XBILS3Mb+KR0Nc8QsJq39:dCAcXPJlM6B93e0Nc8QsC9

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

176.135.22.235:37190

Targets

    • Target

      d2c26bbcc3a4c8088a0853325d6ad1c0_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      d2c26bbcc3a4c8088a0853325d6ad1c0

    • SHA1

      c5e6ba78fbbc665a9378487823400991945a7baf

    • SHA256

      f5c4cf726dc559044d62d9c0d45d5ad4f97de5038a9294665648676575391085

    • SHA512

      fdac41fdd37b9f53ea020f85699319f18b1019d878e4920c00bd6884e5aad3a7e35e5d25b06f4deceb69be6735a6fbefce70d07eadaec8b8b972ab9ad1ab1b44

    • SSDEEP

      1536:IxICYjg4WhiERP4KM6pM4XBILS3Mb+KR0Nc8QsJq39:dCAcXPJlM6B93e0Nc8QsC9

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks