General

  • Target

    5f2ebdf032b724df743389eb7b451e85da798b819bc08ba5a10b729231136707_NeikiAnalytics.exe

  • Size

    35KB

  • MD5

    814a4a111a0e55061265b28077614ad0

  • SHA1

    9d4f529344e9886dc3a565c27b26c9c3b64dd6dd

  • SHA256

    5f2ebdf032b724df743389eb7b451e85da798b819bc08ba5a10b729231136707

  • SHA512

    da6f354b51a9ecb5387b66a7d4c4f774608050af40a1cab182a46836dc29795f1a45ffad5e2ea6f47f371f486398926a786dc934c24f4febe8b94fd98c7541e3

  • SSDEEP

    768:I6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:P8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5f2ebdf032b724df743389eb7b451e85da798b819bc08ba5a10b729231136707_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections