Analysis
-
max time kernel
133s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 09:11
Static task
static1
Behavioral task
behavioral1
Sample
29511a7a84686df8ec7272c9e03914e38180c6d2e4fd817dc8a32007d781e3ae_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29511a7a84686df8ec7272c9e03914e38180c6d2e4fd817dc8a32007d781e3ae_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
29511a7a84686df8ec7272c9e03914e38180c6d2e4fd817dc8a32007d781e3ae_NeikiAnalytics.exe
-
Size
72KB
-
MD5
c0927d1b677a4c9353f1005c89c62390
-
SHA1
40b6a8e7e1149364f570c43ed61dd30ee65f7254
-
SHA256
29511a7a84686df8ec7272c9e03914e38180c6d2e4fd817dc8a32007d781e3ae
-
SHA512
064aa6a50cceba73567ce6df7222442d37e6452624562a9d7dedd8a84e953ee720d21e58e942da5dae8b827fde3e8cff2ff6bbfe12ead994b6d5ec8580492b26
-
SSDEEP
1536:I0pASd04m7nNQk/k9PX/41YbDzva1vMb+KR0Nc8QsJq39:d+k0nnNt89PKkDzvSe0Nc8QsC9
Malware Config
Extracted
metasploit
windows/reverse_tcp
241.71.240.229:42375
Signatures
-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.