General

  • Target

    17dd908143d9481ef3ad91857f838220_NeikiAnalytics.exe

  • Size

    35KB

  • MD5

    17dd908143d9481ef3ad91857f838220

  • SHA1

    9c6c53e91f4cd02e1e0241b06347c09add962e02

  • SHA256

    d4d02b618742581aa5fd568168179da9d9c6753f7f7e83f8ebacdafc98f1b672

  • SHA512

    48db907258ded7e58c9565148b64f832ac02794f04771499d80dfa9812b584c9613493860283c1ae74a97d8807091e0004c08fe6ef955a901641c71fa768bc60

  • SSDEEP

    768:K6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:J8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 17dd908143d9481ef3ad91857f838220_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections