General

  • Target

    0c5e7096619ad0c14dc75bd3fc8388762eb4d9ecf3a513979395730cfdf573c4_NeikiAnalytics.exe

  • Size

    72KB

  • MD5

    159f94d014fb4ae1dc9502b14b7b33c0

  • SHA1

    11717df7c517f8d8c9b0e072e224524a6af3d0ca

  • SHA256

    0c5e7096619ad0c14dc75bd3fc8388762eb4d9ecf3a513979395730cfdf573c4

  • SHA512

    f9f26c7372c912cd32f6be298f26d5749d91fd4a3dd95821335b66803b81a088bf677cf2348fb67664f09e312b4746274e5e46df05067c5afc5b43c112d2cb16

  • SSDEEP

    1536:IbK37VeEB0/yJ4zjbE0z59pNiNPUMb+KR0Nc8QsJq39:WKr4EB0/yJCPECNiNPUe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

10.0.2.4:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c5e7096619ad0c14dc75bd3fc8388762eb4d9ecf3a513979395730cfdf573c4_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections