General

  • Target

    NEAS.f72ede4f7c69de85f1bbc8cf529edf20.exe

  • Size

    61KB

  • MD5

    f72ede4f7c69de85f1bbc8cf529edf20

  • SHA1

    371662496a22a3592d6dc5bd88a19fb2155028bd

  • SHA256

    eed92433f06e3072f456293ed85325d9fa50648a7ac3c2c9b3b0db88402c8d08

  • SHA512

    ef3e922cedf4ae2e103e2b1c32175c41ce3124b9a80123f04ece5a822342640c4f1d7e8a15ef99a229d4792108dd36031eb34806735e73356a76499304c3d6b9

  • SSDEEP

    1536:Cd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZxl/5:ydseIOMEZEyFjEOFqTiQmTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.f72ede4f7c69de85f1bbc8cf529edf20.exe
    .exe windows:4 windows x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections