Overview

overview

10

Static

static

10

20867664e1...cs.exe

windows7-x64

10

20867664e1...cs.exe

windows10-2004-x64

10

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    28-06-2024 21:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20867664e1e1d78248901f8574aa9924548405d8547fa7bf65413294e87ffbab_NeikiAnalytics.exe

  • Size

    3.9MB

  • MD5

    e01943fba69988f32d0b71d440ad8410

  • SHA1

    c68c2e3cb2af942b929a70808fed0e3eb13b0d9c

  • SHA256

    20867664e1e1d78248901f8574aa9924548405d8547fa7bf65413294e87ffbab

  • SHA512

    acb12aecd029b273e4bb465945450df5987cd9f88982411cdf42757f10cb41010b87f1a1e11af62d82a8324fe13a6c203d78f9dfffb4160be58c3dd40d5d3707

  • SSDEEP

    98304:tvgDwcCCpaHZSmWJcEwKuJE8KdOuEEfM7paH6VnwqKkP3y:t/XHZS5aEwxnK5DM7py0nw1Yy

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

Processes

  • C:\Users\Admin\AppData\Local\Temp\20867664e1e1d78248901f8574aa9924548405d8547fa7bf65413294e87ffbab_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\20867664e1e1d78248901f8574aa9924548405d8547fa7bf65413294e87ffbab_NeikiAnalytics.exe"
    1⤵
      PID:1688

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1688-0-0x0000000000230000-0x0000000000231000-memory.dmp
      Filesize

      4KB

      Download