General

  • Target

    cec97d0ba1bccf8fcaf5fab42bb0ee10_NeikiAnalytics.exe

  • Size

    72KB

  • MD5

    cec97d0ba1bccf8fcaf5fab42bb0ee10

  • SHA1

    5a3e20d461db634c64ebdb59a14804409d5862ad

  • SHA256

    ff2b127d9b8ef812cf138e75422de86f67fd397e45dad75781cd5bf87459e0d5

  • SHA512

    508753d5253b2d1478eba1e3de2178ea0aaf4303b380296db57183b25fd51bbd28728884b4577dbcaefb227509b4e45c2c9c166c830cf79f41a3444a2f1d5bac

  • SSDEEP

    1536:IFvB/wIWapV9kvRSAi4wg5/9tMb+KR0Nc8QsJq39:YFw09cPie51te0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.153.138:2333

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cec97d0ba1bccf8fcaf5fab42bb0ee10_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections