IoC for NeedleDropper

Malware analysis and more technical information at https://decoded.avast.io/threatresearch/needledropper/

NeedleDropper samples

SHA-256

660eb5f2811753c24ecbd5c0e08c68d83d7eca1b2827ed90e2a5189ed61f3a5b
f7e52f120ab257e0d8e5021077b3370876be16469b76b6e0b6916486b3977bb3
06b02574925948a3f418ba2851f10585086a5f9b25d8f4e7de62dd52c6a56153
e53e5e07b3165f507046c5992049a816bdd98969f10cc97a3d2bd010aea30b42
1b26f3213c07819cd61ed5e10b009ae5862cade4a3a403dcc6f6310485f6306b

Configuration file samples

SHA-256

1d3078201c04bebc6595a2cc874530f1c2a5ff7201db4c8e43660808563c5a63
dd7acb0d5e05d581148b614816f5450690f3fcc8ba4b3f00b5db1f3684570053
8713d873a8f4179a4079ea46a6ae45a538dc2f07cf7b09f28adc25eec45dc873

Spam email sample

SHA-256

01534a0f3e104b7cbafeeeaac3a0f0bf9d01e017c8a63964d81d0a30baee2916