General

  • Target

    15242821be22322fcdefbd220e51b960_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240609-hygy2agb42

  • MD5

    15242821be22322fcdefbd220e51b960

  • SHA1

    b1503f162f082802df59a5a39cef4c84fe9489ef

  • SHA256

    9e59611d3decd0254b689b004e62eafab571704f8467d95edbbf99b6d5c1e7c1

  • SHA512

    fbf4662c503bee0ef4e1e8919ec039da99e2e6bee4b113052ecca61a85517585dc49d9e7db0016fce3b65f9273670ac4fa8e18dd608f059343a2600ab6d57737

  • SSDEEP

    1536:I2UPWvjXTL2bjQPT6eQLhdZekSJrfgaseqTKTtMb+KR0Nc8QsJq39://zP2/QPT65hdZ1SJrfgCe0Nc8QsC9

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

10.10.1.13:444

Targets

    • Target

      15242821be22322fcdefbd220e51b960_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      15242821be22322fcdefbd220e51b960

    • SHA1

      b1503f162f082802df59a5a39cef4c84fe9489ef

    • SHA256

      9e59611d3decd0254b689b004e62eafab571704f8467d95edbbf99b6d5c1e7c1

    • SHA512

      fbf4662c503bee0ef4e1e8919ec039da99e2e6bee4b113052ecca61a85517585dc49d9e7db0016fce3b65f9273670ac4fa8e18dd608f059343a2600ab6d57737

    • SSDEEP

      1536:I2UPWvjXTL2bjQPT6eQLhdZekSJrfgaseqTKTtMb+KR0Nc8QsJq39://zP2/QPT65hdZ1SJrfgCe0Nc8QsC9

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks