General

  • Target

    e5f043c4074e929b2a97cf9a5b3ab390_exe32.exe

  • Size

    61KB

  • MD5

    e5f043c4074e929b2a97cf9a5b3ab390

  • SHA1

    3c53e4a89fc4a58d0855194b93c914c01d531a68

  • SHA256

    35dab552cd0433343cabdc6d70eb02b4856d4338b9860b2a3b64c1c1a139db09

  • SHA512

    9cd7db3be163f070dd0fb3a16f5dcb60a7c8dfeac9f31887fcb614884d589c2e0df768b15aa1b69e1e4600cf4448bf3a815356c8f59b8c99438352b55d8407ab

  • SSDEEP

    1536:hd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZcl/5:RdseIOMEZEyFjEOFqTiQmOl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5f043c4074e929b2a97cf9a5b3ab390_exe32.exe
    .exe windows:4 windows x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections