General

  • Target

    09e6995c0ae100c4b2b3050ba85e60f0_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240523-h55zfahc9y

  • MD5

    09e6995c0ae100c4b2b3050ba85e60f0

  • SHA1

    8bf05de135912fe184d3530a3b19f2435942cd82

  • SHA256

    e5b7844eba95e64479a4121da45b86c0d6a2db1d451627af346b08e89d616a47

  • SHA512

    ba2478bab5c9327fdd19319d2b355e281a27c29c2f5edb1bf1239bbb67f302072e2607b75a577c49cb3499a639c8daa7af5340c30a9b47a60f352c5d28843475

  • SSDEEP

    1536:Ib1jN5vlK4QoDQjpQyDCu0Mv0VMb+KR0Nc8QsJq39:aHpY4hDQjpQyDCutSe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.10.10.10:4444

Targets

    • Target

      09e6995c0ae100c4b2b3050ba85e60f0_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      09e6995c0ae100c4b2b3050ba85e60f0

    • SHA1

      8bf05de135912fe184d3530a3b19f2435942cd82

    • SHA256

      e5b7844eba95e64479a4121da45b86c0d6a2db1d451627af346b08e89d616a47

    • SHA512

      ba2478bab5c9327fdd19319d2b355e281a27c29c2f5edb1bf1239bbb67f302072e2607b75a577c49cb3499a639c8daa7af5340c30a9b47a60f352c5d28843475

    • SSDEEP

      1536:Ib1jN5vlK4QoDQjpQyDCu0Mv0VMb+KR0Nc8QsJq39:aHpY4hDQjpQyDCutSe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks