General

  • Target

    c94e5e85e3df45c59cd1114dd8dc4a60_NeikiAnalytics

  • Size

    35KB

  • MD5

    c94e5e85e3df45c59cd1114dd8dc4a60

  • SHA1

    c78b4ad4600eeb9ac819aabb040ec9ad2bf2762e

  • SHA256

    64ed5a84f8689fce250677f4189386901bc8dbf7a23c22bca43ee701f44566f1

  • SHA512

    02f38ad758de9ce186df9d77f2d3ae1f7c69d8c7f610f9c006ab7aa6e7fb9b52721c5a912b4370798761f8f81cfaa33681faf80fd9bbf25d688c9c5a370ba485

  • SSDEEP

    768:f6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:i8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c94e5e85e3df45c59cd1114dd8dc4a60_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections