Overview

overview

10

Static

static

10

8902939bb3...0f.exe

windows7-x64

10

8902939bb3...0f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b492be0ce1b2cd7ac4d4f862eeeab59.bin

  • Size

    25KB

  • MD5

    833c4fc61becd84b1f676821076b2fa4

  • SHA1

    b0c722b2ab1bfb648350427f06bceb6ff8bc56e8

  • SHA256

    41e74b97a2fed3188dcf6b7df5505fec3ab1999d0535fe0e9372965dbb35de52

  • SHA512

    ef8a36643b729582c1c5cdc894d081337c8153191f0edad7077e9dca9c37a49d7f673a75d583c2fbe7b04f0b9f5151893b77962083d685b9db670e9b8735a053

  • SSDEEP

    768:MKP0/IMoJO64UjcVvDrHxeFJXVW5sbJGjS312yQC:RiLoJPZOvD9eFtVW5sgjSl2yF

Score
10/10
neconyd

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
    neconyd
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b492be0ce1b2cd7ac4d4f862eeeab59.bin
    .zip

    Password: infected

  • 8902939bb36b2247b9c1d0e5a1e0cecf59d98ec5508fb4aeb3002f9cace0460f.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections