Overview

overview

10

Static

static

3

0790e5965a...cs.exe

windows7-x64

1

0790e5965a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0790e5965afd9e56324496ab26c1113a09b961ae445632c6f7b6a6e797c37cf1_NeikiAnalytics.exe

  • Size

    261KB

  • Sample

    240630-mthrzswfqh

  • MD5

    3776a56bead90b28c781a8dd2a716fb0

  • SHA1

    b973a1497f3fbed61d12c3ab6ca042718f508f16

  • SHA256

    0790e5965afd9e56324496ab26c1113a09b961ae445632c6f7b6a6e797c37cf1

  • SHA512

    9bc20cfdcb419f37cfec610b7a2df5cc9778e77c0ca1d8f4e03578a77456473aba8aabbcf2cb7595de87111c840ecbc18ca5e1f220c31f29b16d8b80e51f1b1c

  • SSDEEP

    3072:2OZ3MBLhTb01yNjhnRwEHQEwMbQkppfwst8jwJmKNrQW6ldVEOEcR1QuRSlH4u:2OZ4hX01yNjhGEw5M0sX8jR4Ylrq4

Score
10/10
metasploitbackdoortrojan

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.56.114:443

Targets

    • Target

      0790e5965afd9e56324496ab26c1113a09b961ae445632c6f7b6a6e797c37cf1_NeikiAnalytics.exe

    • Size

      261KB

    • MD5

      3776a56bead90b28c781a8dd2a716fb0

    • SHA1

      b973a1497f3fbed61d12c3ab6ca042718f508f16

    • SHA256

      0790e5965afd9e56324496ab26c1113a09b961ae445632c6f7b6a6e797c37cf1

    • SHA512

      9bc20cfdcb419f37cfec610b7a2df5cc9778e77c0ca1d8f4e03578a77456473aba8aabbcf2cb7595de87111c840ecbc18ca5e1f220c31f29b16d8b80e51f1b1c

    • SSDEEP

      3072:2OZ3MBLhTb01yNjhnRwEHQEwMbQkppfwst8jwJmKNrQW6ldVEOEcR1QuRSlH4u:2OZ4hX01yNjhGEw5M0sX8jR4Ylrq4

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks