metasploit | c1d42b6738678b616301bdb8eb96d1c085eaddb77d17dabe091556333a48ef29 | Triage

Sharing

General

Target

4213c2d0d099495ba4db170403a68b80_NeikiAnalytics.exe
Size

72KB
Sample

240526-a5avashc24
MD5

4213c2d0d099495ba4db170403a68b80
SHA1

af523d5e21f214db97f374fdfa02a923742b3b8a
SHA256

c1d42b6738678b616301bdb8eb96d1c085eaddb77d17dabe091556333a48ef29
SHA512

ef452e40926b06e03cd552a6967e5363f0830bfb9fb7cbdd69d9420b2a334ce9bcd4bf0f9cd59edbb4bc790e9a78de444e19c95c38e496588edd58a3d1110f86
SSDEEP

1536:IHstnxwjFbw7g9YBZcC4sIBZlUuRMb+KR0Nc8QsJq39:TxwC7EPsIB7Uue0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

203.21.223.9:32178

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Targets

- Target
  
  4213c2d0d099495ba4db170403a68b80_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  4213c2d0d099495ba4db170403a68b80
- SHA1
  
  af523d5e21f214db97f374fdfa02a923742b3b8a
- SHA256
  
  c1d42b6738678b616301bdb8eb96d1c085eaddb77d17dabe091556333a48ef29
- SHA512
  
  ef452e40926b06e03cd552a6967e5363f0830bfb9fb7cbdd69d9420b2a334ce9bcd4bf0f9cd59edbb4bc790e9a78de444e19c95c38e496588edd58a3d1110f86
- SSDEEP
  
  1536:IHstnxwjFbw7g9YBZcC4sIBZlUuRMb+KR0Nc8QsJq39:TxwC7EPsIB7Uue0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan