General

  • Target

    omsecor.exe

  • Size

    84KB

  • MD5

    d2eb2409924730a2bdd76af65fb6b494

  • SHA1

    8f38e70ea4bf6184217e5cbc34b99d4f01b43612

  • SHA256

    09ddabf3a385c7a02991d0582a853598eff57a7f222973edf97cc1cb989a17f2

  • SHA512

    ab2d3c41638f1a1e6508277e3aa81d719c8cbdac1ab7d7007cf7179e45407897131b8f384ddcaa9a9a3fefe7b0803e24971837dba697bf96a32605f0d0bd78fa

  • SSDEEP

    768:qMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:qbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • omsecor.exe
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections