General

  • Target

    145c951d205f7efc2a78970edee08690_NeikiAnalytics.exe

  • Size

    35KB

  • MD5

    145c951d205f7efc2a78970edee08690

  • SHA1

    6634c8176d7b829a11c750e53237e63767bb2871

  • SHA256

    c7276786d1a89e04a1d6e6bb5d817576ee3335cde2f9b336a8bcd22e86f14421

  • SHA512

    a0c794c4e836763b71feec9e2e04b3ffb4c89ed391202e6d2c1efce8d7c5447b247d51ee7dbe26ec5a8f6eba6d600d2d9592c369c5385d3d5361ef36b0a6551b

  • SSDEEP

    768:8U6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:k8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 145c951d205f7efc2a78970edee08690_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections