Overview

overview

10

Static

static

10

82d0964916...cs.exe

windows7-x64

10

82d0964916...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    82d0964916b089815d9efda4d701f240_NeikiAnalytics

  • Size

    35KB

  • MD5

    82d0964916b089815d9efda4d701f240

  • SHA1

    8114eda708bebee8ac76fb3124d9b76e526c72c4

  • SHA256

    705c12ffd10aa99b5d7d241ca21101357af4944ee09243bbe3c88e3c2451278e

  • SHA512

    1b3a59f264e5efae5837dda0a989f3b1162851ef8b8226bb6a0763c20a09bbfa6c781cfff670d0220070b3e15764ffc7fbb2d5229caccbe47229f40b73423b36

  • SSDEEP

    768:m6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:98Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 82d0964916b089815d9efda4d701f240_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections