General

  • Target

    64ba64ed24bfff91a05edfdc1a4b7060_NeikiAnalytics.exe

  • Size

    7KB

  • MD5

    64ba64ed24bfff91a05edfdc1a4b7060

  • SHA1

    d4fe8cc99f44495adeffb0d443bd952cc4568076

  • SHA256

    0fb25b98896d129b3e5a5e4b66c431cd64854cf4a4d8ef8a39c42360546ae12e

  • SHA512

    5c156a029c19fd8dc23cda678c9434cf2194bfae9732f4bfa81ee855bd3c6f7a8a4ecc2f190f7a5b6eb888a3232b9f80cda0d4cf657941169425cf69142ce0ef

  • SSDEEP

    24:eFGStrJ9u0/64MednZdkBQAVRA/lv74RiEDSpmB:is0nfdkBQrxUhB

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

C2

10.0.2.15:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 64ba64ed24bfff91a05edfdc1a4b7060_NeikiAnalytics.exe
    .exe windows:4 windows x64 arch:x64

    b4c6fff030479aa3b12625be67bf4914


    Headers

    Imports

    Sections