General

  • Target

    4b091731c246941c49e621c127780930_NeikiAnalytics

  • Size

    52KB

  • MD5

    4b091731c246941c49e621c127780930

  • SHA1

    217d15342c842197734e028efae684adb3e22ca0

  • SHA256

    49ff26a1baa57e7d23a172f276c3740577e6cb47c802b1421b0982ff46743b6a

  • SHA512

    5a794943bf86dbc89d1a8569a8406faa40e5d3403f5f5210d802269e64faafafe5a87cf3346f51e0aacd475ca76509248682d2e8a134f8b75f849ef7f9961eb9

  • SSDEEP

    768:3XHPb+71O4G+lpqg6d6uGH3MZVDruM1BH5FiKTsg:nPS7JLpqZd6u5ruM1Ribg

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b091731c246941c49e621c127780930_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections