General

  • Target

    a48dd9b08f4ca3b77ed2835ad98b7b749d022acd02cb4c45e1f5e5a507f0875b

  • Size

    84KB

  • MD5

    b58a99c210d11b1f0f7cd6db84afedb3

  • SHA1

    58f352683675f282b352a24dfa745fc92c192f50

  • SHA256

    a48dd9b08f4ca3b77ed2835ad98b7b749d022acd02cb4c45e1f5e5a507f0875b

  • SHA512

    3fba64c39bd3d2bc1a8dd6a75ae0938cf9f3be2723f1943f30a9e043730e2f465a10017c32291520ca9e8f39f5a4855648a5a6886f9842612e1dd2cb69277910

  • SSDEEP

    1536:xd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:BdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a48dd9b08f4ca3b77ed2835ad98b7b749d022acd02cb4c45e1f5e5a507f0875b
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections