Analysis
-
max time kernel
140s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
19-05-2024 16:24
General
-
Target
f19e2567c3983eae7d91be9682e96360_NeikiAnalytics.exe
-
Size
25KB
-
MD5
f19e2567c3983eae7d91be9682e96360
-
SHA1
e8c7084b1898878a3d3ba6d7e25faef08e5a8d12
-
SHA256
560685e4112422fe93b9c89d1dd074ba500b45596b2ccadbd561637dc160ab35
-
SHA512
c217b7a747f03bc54459feb1c620e5ac1d87528e99d9227ba2135e25b7dbdf3219f1b62b39642340e60a6e61ce42ff693ea225aa856fd79386a00257eec86661
-
SSDEEP
384:StUq1tR/YFQB1wHUqarkdNQ1lyEg4d17u/D4XBH8k45kQ/zFNi:SN/NEH7dNzi7dxH8iQ/zr
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.57.134:7777/5Nbx
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAARJS)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f19e2567c3983eae7d91be9682e96360_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\f19e2567c3983eae7d91be9682e96360_NeikiAnalytics.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
60KB