General

  • Target

    c79aa6f29e078e4cee29f646891dd0efe5fe6ef4b190768e34032d906614ee40

  • Size

    90KB

  • MD5

    9c7c7ca04cf711813bc726afaedc31d7

  • SHA1

    0e3db4ae076f280bc2461727c0bacbef7dc3407f

  • SHA256

    c79aa6f29e078e4cee29f646891dd0efe5fe6ef4b190768e34032d906614ee40

  • SHA512

    7bb7f7dfdbdc5f614018acc437b07492c917b7dd0c487c78b52cc1d3a70540517ba698a314fb7fb64d9e4e101d0d93c76dca136031b9b08715d1d895f3f9be2d

  • SSDEEP

    768:cMEIvFGvZEr8LFK0ic46N4zeSdPAHwmZGp6JXXlaa5uA:cbIvYvZEyFKF6N4aS5AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c79aa6f29e078e4cee29f646891dd0efe5fe6ef4b190768e34032d906614ee40
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections