General

  • Target

    220f12b14496b78aec097fccb36f6a90_NeikiAnalytics.exe

  • Size

    7KB

  • Sample

    240605-bbmgnsaa97

  • MD5

    220f12b14496b78aec097fccb36f6a90

  • SHA1

    3ae9f33aca28f787387b81508ef52b3444327eaa

  • SHA256

    3e28c31229ff9f9a7ee8899a93afd4921e0f054eda07e4ba4160913320effc3a

  • SHA512

    b0d5c8aecccf2112fe9e40cd448dc1f94221eb25508b73a7f2b2ca311dc1ff76db52363dcc903a1e592304a56ce5ead43b37304918802de30fa7bad76971bc64

  • SSDEEP

    24:eFGStrJ9u0/67CgRnZdkBQAVRYyKZq7eNDMSCvOXpmB:is0OTkBQ5yhSD9C2kB

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

127.0.0.1:123

Targets

    • Target

      220f12b14496b78aec097fccb36f6a90_NeikiAnalytics.exe

    • Size

      7KB

    • MD5

      220f12b14496b78aec097fccb36f6a90

    • SHA1

      3ae9f33aca28f787387b81508ef52b3444327eaa

    • SHA256

      3e28c31229ff9f9a7ee8899a93afd4921e0f054eda07e4ba4160913320effc3a

    • SHA512

      b0d5c8aecccf2112fe9e40cd448dc1f94221eb25508b73a7f2b2ca311dc1ff76db52363dcc903a1e592304a56ce5ead43b37304918802de30fa7bad76971bc64

    • SSDEEP

      24:eFGStrJ9u0/67CgRnZdkBQAVRYyKZq7eNDMSCvOXpmB:is0OTkBQ5yhSD9C2kB

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks