General

  • Target

    626e28fec46261a4772ee6addb2fcfc0_NeikiAnalytics.exe

  • Size

    72KB

  • Sample

    240618-227teaydqc

  • MD5

    626e28fec46261a4772ee6addb2fcfc0

  • SHA1

    086e95d1574444d9f3be1f00e676376f338f6395

  • SHA256

    f33717e8b7dcc448e6f07ad1ec431b055711365d2a4cb499e60e3dfeab231ce0

  • SHA512

    bc039ed0e0a05134b7b0030fe521a33e4c6ccf18515e04b5469fd939990057dd5af07130280e0f9c9e2865a75263f2f18b6154282bc703504e49f2f205fa43fe

  • SSDEEP

    768:IfXjJD4eIB890PxfF5fXfhVpmLhHKuqKTzevHe/by8bbrx2YDgFr7:IfXjJ8BU0pfnf/8hquJUHeJvxLgF

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.107.129:2333

Targets

    • Target

      626e28fec46261a4772ee6addb2fcfc0_NeikiAnalytics.exe

    • Size

      72KB

    • MD5

      626e28fec46261a4772ee6addb2fcfc0

    • SHA1

      086e95d1574444d9f3be1f00e676376f338f6395

    • SHA256

      f33717e8b7dcc448e6f07ad1ec431b055711365d2a4cb499e60e3dfeab231ce0

    • SHA512

      bc039ed0e0a05134b7b0030fe521a33e4c6ccf18515e04b5469fd939990057dd5af07130280e0f9c9e2865a75263f2f18b6154282bc703504e49f2f205fa43fe

    • SSDEEP

      768:IfXjJD4eIB890PxfF5fXfhVpmLhHKuqKTzevHe/by8bbrx2YDgFr7:IfXjJ8BU0pfnf/8hquJUHeJvxLgF

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks