General

  • Target

    virussign.com_87224954f42c38a4d3447835f1e063b0.vir

  • Size

    84KB

  • MD5

    87224954f42c38a4d3447835f1e063b0

  • SHA1

    bf6b3e261ef5f0f438359e7aa2827df9c6552917

  • SHA256

    611a212ecfa77a60a56931c6ed568989215caba9b63071ef59f1468dfca4ae30

  • SHA512

    138f032aac61b115306a6654141d0808d75d7193b8f03625b3d7a09c6f3f8bd786ff7f7fc809d5417cff5e41ef436bdd75ded89521ca28e1f13a4566cb1a8062

  • SSDEEP

    768:JMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:JbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_87224954f42c38a4d3447835f1e063b0.vir
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections