General

  • Target

    fab80ce13ade02443e2be8ed9f0fc9817f4ff82439cf11657db3c5d8174ad783

  • Size

    64KB

  • MD5

    bd1ab75805d9721b90b664db7a083fc2

  • SHA1

    1f9da0190e797e3fd2782d1db3503cfac46904ff

  • SHA256

    fab80ce13ade02443e2be8ed9f0fc9817f4ff82439cf11657db3c5d8174ad783

  • SHA512

    6b55037df689c9ffb7402585194ab7c910ab7134b325ef4d470b240067c4e1b01ceed0c8c5239b70fd762658830cdb8efce3321592cdadb03ed12f73efee0e53

  • SSDEEP

    768:sMEIvFGvZEr8LFK0ic46N47eSdYAHwmZwSp6JXXlaa5uA:sbIvYvZEyFKF6N4yS+AQmZcl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fab80ce13ade02443e2be8ed9f0fc9817f4ff82439cf11657db3c5d8174ad783
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections