General

  • Target

    omsecor.exe

  • Size

    76KB

  • MD5

    2b492be0ce1b2cd7ac4d4f862eeeab59

  • SHA1

    102c81a6c9b047881bafdb9092e55263ce959987

  • SHA256

    8902939bb36b2247b9c1d0e5a1e0cecf59d98ec5508fb4aeb3002f9cace0460f

  • SHA512

    637a31c1ec00d77871b0227e09b51e04323251579f3c2647069b5c10fc083db862d9dbb6388d655cbba6278aec6ffbf79505725c0a05176492d5b826354d8ee9

  • SSDEEP

    768:qfMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA9:qfbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • omsecor.exe
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections