Overview

overview

10

Static

static

10

04492187f7...cs.exe

windows7-x64

10

04492187f7...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04492187f72a9ed4bf04d866667654c0_NeikiAnalytics

  • Size

    52KB

  • MD5

    04492187f72a9ed4bf04d866667654c0

  • SHA1

    f1f8905616f7058dce18afa2fd1b31c76670cdb6

  • SHA256

    cb668f0e6e11632a7d041323a79643917c56e42d423f3c340da0774608b7676d

  • SHA512

    74082fe4a18efc82a70e141bc61452571c849b4b897984d4fa8302e93efc2eb0ab2bc23bba581d1bc7cc5b9685a91b6b09ba34b5c3e9c8012059d51754088e57

  • SSDEEP

    768:uXHPb+71O4G+lpqg6d6uGH3MZVDruM1BH5FiKTsg:qPS7JLpqZd6u5ruM1Ribg

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04492187f72a9ed4bf04d866667654c0_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections