Overview

overview

10

Static

static

10

1c01b684fd...cs.exe

windows7-x64

10

1c01b684fd...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c01b684fd7a9b216d615248bae8ddd0_NeikiAnalytics.exe

  • Size

    72KB

  • MD5

    1c01b684fd7a9b216d615248bae8ddd0

  • SHA1

    980b99d39cc6aefc7c1a67a6d34b53c03f494f0e

  • SHA256

    8c697782e0c2996442292b50412496ded30fe59abcbcb22d8164af06e6b11e53

  • SHA512

    f1bd5aeb3a369e898b7b8de0c5517ceb7e3b384d032de39f9d7943e474ab19838039421e51cfd9b2dfee4c6b2dbf19129049728c26e939f2b181c44b8b0ec654

  • SSDEEP

    1536:Iw7adnPcNsJl2gCi/AYrcqcLEPIXkpViaWldeMb+KR0Nc8QsJq39:HaVUNsJSiIH3QP9KaMee0Nc8QsC9

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.3:443

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c01b684fd7a9b216d615248bae8ddd0_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections