General

  • Target

    virussign.com_57174ec1520e1fa2884bb4d3d5878de0.vir

  • Size

    72KB

  • MD5

    57174ec1520e1fa2884bb4d3d5878de0

  • SHA1

    b378847911b2d655dc1e25739c6e04e5cf703d85

  • SHA256

    b6940df6cb5a289fcbb9fae3c7a7fd38eec862ffe534d2342b7ce9d9dec5f237

  • SHA512

    0d4fa98eb80d1d907b05ab9267d48a9907d35222bd95e1f4d0e39bffbfdb68a48008fb84dae9f3b8c8ea5bcc6d27674987822a7d916dc4d3d82c4c30aae1c27b

  • SSDEEP

    768:sMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:sbIvYvZEyFKF6N4yS+AQmZTl/5O

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_57174ec1520e1fa2884bb4d3d5878de0.vir
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections