Overview

overview

10

Static

static

3

228e220e3c...cs.exe

windows7-x64

1

228e220e3c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    228e220e3c491109131ef6bda22623d6f608aefae3ffaef3de3dc9988a078244_NeikiAnalytics.exe

  • Size

    180KB

  • Sample

    240630-3cypwasckq

  • MD5

    77d1fced99f0bd2d286639eacae8feb0

  • SHA1

    db493a64eae0371c7edeb74216d420d54b51bd86

  • SHA256

    228e220e3c491109131ef6bda22623d6f608aefae3ffaef3de3dc9988a078244

  • SHA512

    e6e5de167b25206219e97d3246865d2955652fc10e22f9acdacf885f3a5139ee98b6d410ee9304a524538243dd061a2c962f12f5fe2941d0395519889093f4f7

  • SSDEEP

    3072:y5fbrIqlpixIuYUvWHF+De+YAP82Ytv2QAgXmqAbth0XGI:gHzdKvWl+DeT6YtubMYt

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

35.157.111.131:11110

Targets

    • Target

      228e220e3c491109131ef6bda22623d6f608aefae3ffaef3de3dc9988a078244_NeikiAnalytics.exe

    • Size

      180KB

    • MD5

      77d1fced99f0bd2d286639eacae8feb0

    • SHA1

      db493a64eae0371c7edeb74216d420d54b51bd86

    • SHA256

      228e220e3c491109131ef6bda22623d6f608aefae3ffaef3de3dc9988a078244

    • SHA512

      e6e5de167b25206219e97d3246865d2955652fc10e22f9acdacf885f3a5139ee98b6d410ee9304a524538243dd061a2c962f12f5fe2941d0395519889093f4f7

    • SSDEEP

      3072:y5fbrIqlpixIuYUvWHF+De+YAP82Ytv2QAgXmqAbth0XGI:gHzdKvWl+DeT6YtubMYt

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks