General

  • Target

    905db1f79214efa016b23a44ae0b0f10_NeikiAnalytics.exe

  • Size

    2.2MB

  • Sample

    240523-1khbrahg7y

  • MD5

    905db1f79214efa016b23a44ae0b0f10

  • SHA1

    7d209a73842f51786e9dc60ba19dda095f3feba4

  • SHA256

    e7498a599897bdcf196cb5bd07e79d970eb1553309500411766ea2a241d7bc23

  • SHA512

    14a0c054b85ccb9dc4951b9adff282a6cf0de2614837478acef4ceb2001cf8b26a4bb2931fe1ee1e6ec172e9881d223b7bc4cea9fb079bd6822b95830d8bd42d

  • SSDEEP

    24576:uhuQ3tQ4jNWweGRlTJcx2hekmUMg2IpeqUGkQxHuyuViNJE6x+rKnibiF1r:ENRpWweA9Q2MW2IpkGFxpMqB+WF1r

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

127.0.0.1:123

Targets

    • Target

      905db1f79214efa016b23a44ae0b0f10_NeikiAnalytics.exe

    • Size

      2.2MB

    • MD5

      905db1f79214efa016b23a44ae0b0f10

    • SHA1

      7d209a73842f51786e9dc60ba19dda095f3feba4

    • SHA256

      e7498a599897bdcf196cb5bd07e79d970eb1553309500411766ea2a241d7bc23

    • SHA512

      14a0c054b85ccb9dc4951b9adff282a6cf0de2614837478acef4ceb2001cf8b26a4bb2931fe1ee1e6ec172e9881d223b7bc4cea9fb079bd6822b95830d8bd42d

    • SSDEEP

      24576:uhuQ3tQ4jNWweGRlTJcx2hekmUMg2IpeqUGkQxHuyuViNJE6x+rKnibiF1r:ENRpWweA9Q2MW2IpkGFxpMqB+WF1r

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks