General

  • Target

    4c1844acd093de809b95044c34eb5020_NeikiAnalytics.exe

  • Size

    35KB

  • MD5

    4c1844acd093de809b95044c34eb5020

  • SHA1

    f410b1a20a30d947c8a2b158520e0640779f51d2

  • SHA256

    0f4810f9b49d94e5262128a2456486b076734db252d2ca492463c8a21485ba53

  • SHA512

    ff2bcc8f8dbfa946bffc34f576672c3f16216f12605616d8093114725470388b0cb9961b31904a87128042eb95d75b4d0c16c5326140e98f0a09b5bc2afb1962

  • SSDEEP

    768:u6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:18Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c1844acd093de809b95044c34eb5020_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections