General

  • Target

    19e604b64308734b39f833642baddb60_NeikiAnalytics.exe

  • Size

    72KB

  • MD5

    19e604b64308734b39f833642baddb60

  • SHA1

    59836c483a5fffb542966c06b67e4088cad158bd

  • SHA256

    d527e07f0ee6a04bf43ddf65af1ac7826c64b674c00176bf8e6f3fe7394d350b

  • SHA512

    46a321f8304fad04c9b3edad94a06ac90af683b1fc3c52d3aa9bde37e48a5092fd08a270d7b0067c9f8a1cfa56e4905b9c00aeed1776c3a3efd6a9710fd0e2a3

  • SSDEEP

    1536:I9Y8S50C80OPxoSQPCR09ewDR9Mb+KR0Nc8QsJq39:v8S50x0uKPGeV9e0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.1.95:8899

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 19e604b64308734b39f833642baddb60_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections