Overview

overview

10

Static

static

10

dce0b8b4c6...cs.exe

windows7-x64

10

dce0b8b4c6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dce0b8b4c651646ae8e06856dc56f980_NeikiAnalytics

  • Size

    35KB

  • MD5

    dce0b8b4c651646ae8e06856dc56f980

  • SHA1

    c42283d6c995268fac2d9a834f06955bd3eb1ad9

  • SHA256

    a0bd838031530f1b4da68452347bf6d4c57c26f0377b3ffafdf8edddb35d0399

  • SHA512

    740c9f0134a4bb30265d85c0acee8dfb4e24ac79ed47cc5f75686ffa242cebeb591f837115df0b414b4dc2ad72a9c79d18f3c2979c40b29ecb79bd89e716e29d

  • SSDEEP

    768:Q6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:n8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
upxneconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • dce0b8b4c651646ae8e06856dc56f980_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections