Overview

overview

10

Static

static

10

7a5c36cdd8...cs.exe

windows7-x64

10

7a5c36cdd8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7a5c36cdd88ae9fbc59dd04f2f717f70_NeikiAnalytics

  • Size

    35KB

  • MD5

    7a5c36cdd88ae9fbc59dd04f2f717f70

  • SHA1

    0bbed2896b2c00e8eeee507eb28765f091b595b7

  • SHA256

    f0497dc948cecb671abf455ae751b3f396ee98fdfbdc16ec1acf60c0be7690ca

  • SHA512

    47e9b2e73088936ac8130512f17b9f9a0df2aeb8732a24712c3852da7fa50979dfabbaca6de5b0558dbbee09ca2dad832de874d65cf6f280e1469b75deb6854d

  • SSDEEP

    768:16vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:48Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7a5c36cdd88ae9fbc59dd04f2f717f70_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections