General

  • Target

    732a08217b6e9076991ebb9b851a40b0_NeikiAnalytics.exe

  • Size

    89KB

  • MD5

    732a08217b6e9076991ebb9b851a40b0

  • SHA1

    bd55319fbd6e26dc782f6d5bdfdb363ff127a4f5

  • SHA256

    fd6be9f2ad54c2c92f8d3a730e6cc2b5eb1d99cd75fef3934cb878c8ebf6ce21

  • SHA512

    97cf157c393dba4a23fde85caff86f3143922ef3f6cce96afdb7dab8916beb5c5e0279190515fe6b4c0522984955fb3d86c7cdebb836dafc8a817ea33e675e3c

  • SSDEEP

    1536:eT/iQalqTQHfQmElBhlwnpqwTuHNrE1lUOLcA5TvoEANRfkzZTM:O/OgmElBh6nwwTwbOLMEAUTM

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://4.newenergydata.biz/forum/viewtopic.php

http://4.newenergydata.info/forum/viewtopic.php

Attributes
  • payload_url

    http://carolinaaramburo.com/nKY9.exe

    http://sesliminciler.tk/HuG7iYXU.exe

    http://safetyskid.com/zewHoN.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 732a08217b6e9076991ebb9b851a40b0_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    2c8567c932832b8c3359ddf9343a4028


    Headers

    Imports

    Sections