General

  • Target

    e3f38194dfd13868588a873f51ee6c74_JC.exe

  • Size

    72KB

  • MD5

    e3f38194dfd13868588a873f51ee6c74

  • SHA1

    e8d3898ab2353d00d9fcd4080497f8fc03cb53d6

  • SHA256

    c5b0deb10e30f271521c6e594aefe7ecd68a076c338c0f93651a6d8e2a1bb71e

  • SHA512

    44e584edeb5dee231b81658beb22279bbe63b9d394c17fe439dec20649eecb7393f85d9e735bcd81176492847ccf08ce87089536690c55ddee10f3dcc934b69b

  • SSDEEP

    1536:sd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5211:UdseIOMEZEyFjEOFqTiQm5l/5211

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e3f38194dfd13868588a873f51ee6c74_JC.exe
    .exe windows:4 windows x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections