General

  • Target

    a098db51a04e7299ce6a4b72d7cae670_NeikiAnalytics.exe

  • Size

    1.8MB

  • MD5

    a098db51a04e7299ce6a4b72d7cae670

  • SHA1

    cdf8c010cdca86f8f6c8ce5b5139e11236c0ee0d

  • SHA256

    aef11d6533b593bc4f68bac3727967f1f8a0c1c0a10f6ecf7abeb2433b879af6

  • SHA512

    68f31394bf0223a687d5ca9e0863561c14a46d6f521a44f27625b9c3bd2a3bbdb15ed1d017fa31bf61895ce626e430faa89cbc8d39cfa181390835a3dc77d10e

  • SSDEEP

    24576:rdJ/E3EYNLEHsooiN5kCfKNYI3/yfpoA5m20o95jZ47SA4KLmQU8:rI9NLNoDUb3mqcV0Ujm5X7U8

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://154.204.178.55:5555/b2Wr

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a098db51a04e7299ce6a4b72d7cae670_NeikiAnalytics.exe
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections