metasploit | 30ae535782e87f20a7460eb9f8b2d0ef395723113b3e012b9cccb77b5c44ff5a | Triage

Sharing

General

Target

437cc0c0e7b5239cc359be51f0cd5d20_NeikiAnalytics.exe
Size

72KB
Sample

240606-vr7x4aaa82
MD5

437cc0c0e7b5239cc359be51f0cd5d20
SHA1

7a7c1ce110ecb1e4bbc87969b82a3f10d8197625
SHA256

30ae535782e87f20a7460eb9f8b2d0ef395723113b3e012b9cccb77b5c44ff5a
SHA512

a3107c66bfc8e4c8ab96bdb0dd3fdb441ec511c870e7041fd0b13e60d445be6b6542f6dddd296afe755d8a915094feccfdfba31ab975e11b9c3121902be910af
SSDEEP

1536:IW65BC8M8kt7x9PYk/udVxhY3rH7IMb+KR0Nc8QsJq39:m5BCVr7x9HO7ibHse0Nc8QsC9

Score

10^/10

metasploit backdoor trojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.10:4444

Targets

- Target
  
  437cc0c0e7b5239cc359be51f0cd5d20_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  437cc0c0e7b5239cc359be51f0cd5d20
- SHA1
  
  7a7c1ce110ecb1e4bbc87969b82a3f10d8197625
- SHA256
  
  30ae535782e87f20a7460eb9f8b2d0ef395723113b3e012b9cccb77b5c44ff5a
- SHA512
  
  a3107c66bfc8e4c8ab96bdb0dd3fdb441ec511c870e7041fd0b13e60d445be6b6542f6dddd296afe755d8a915094feccfdfba31ab975e11b9c3121902be910af
- SSDEEP
  
  1536:IW65BC8M8kt7x9PYk/udVxhY3rH7IMb+KR0Nc8QsJq39:m5BCVr7x9HO7ibHse0Nc8QsC9
Score

10^/10

metasploit backdoor trojan
- MetaSploit
  Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
  trojan backdoor metasploit
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

metasploitbackdoortrojan

behavioral2

metasploitbackdoortrojan