Overview

overview

10

Static

static

3

f19e2567c3...cs.exe

windows7-x64

10

f19e2567c3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f19e2567c3983eae7d91be9682e96360_NeikiAnalytics.exe

  • Size

    25KB

  • Sample

    240519-twvmwsfb82

  • MD5

    f19e2567c3983eae7d91be9682e96360

  • SHA1

    e8c7084b1898878a3d3ba6d7e25faef08e5a8d12

  • SHA256

    560685e4112422fe93b9c89d1dd074ba500b45596b2ccadbd561637dc160ab35

  • SHA512

    c217b7a747f03bc54459feb1c620e5ac1d87528e99d9227ba2135e25b7dbdf3219f1b62b39642340e60a6e61ce42ff693ea225aa856fd79386a00257eec86661

  • SSDEEP

    384:StUq1tR/YFQB1wHUqarkdNQ1lyEg4d17u/D4XBH8k45kQ/zFNi:SN/NEH7dNzi7dxH8iQ/zr

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.57.134:7777/5Nbx

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAARJS)

Targets

    • Target

      f19e2567c3983eae7d91be9682e96360_NeikiAnalytics.exe

    • Size

      25KB

    • MD5

      f19e2567c3983eae7d91be9682e96360

    • SHA1

      e8c7084b1898878a3d3ba6d7e25faef08e5a8d12

    • SHA256

      560685e4112422fe93b9c89d1dd074ba500b45596b2ccadbd561637dc160ab35

    • SHA512

      c217b7a747f03bc54459feb1c620e5ac1d87528e99d9227ba2135e25b7dbdf3219f1b62b39642340e60a6e61ce42ff693ea225aa856fd79386a00257eec86661

    • SSDEEP

      384:StUq1tR/YFQB1wHUqarkdNQ1lyEg4d17u/D4XBH8k45kQ/zFNi:SN/NEH7dNzi7dxH8iQ/zr

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks