General

  • Target

    191f1e3eb40d96e82782e06c514ed1f923e7c765e0c9c43acd4c56465714a1b1_NeikiAnalytics.exe

  • Size

    124KB

  • MD5

    c1d103fc45edcd188c9cff50402439a0

  • SHA1

    16a4aaaa23035b6a745323fab2eece6ffd1da310

  • SHA256

    191f1e3eb40d96e82782e06c514ed1f923e7c765e0c9c43acd4c56465714a1b1

  • SHA512

    879667f62e99c90a890c70c0d1d1cf3bf04dce5efe169f65e5feeb02e9a9088cc34843beb1e90cf777db7b15d23a89db02a6e63e5f295242c8d1080c8b9ed47e

  • SSDEEP

    1536:Ia8w2smtHl6WBMThsEiB9N4BMb+KR0Nc8QsJq3:csmtHxIGfB9N4Be0Nc8QsC

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

127.0.0.1:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 191f1e3eb40d96e82782e06c514ed1f923e7c765e0c9c43acd4c56465714a1b1_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections