General

  • Target

    virussign.com_f06078631793c3af3d431c2ffdc6ae10.vir

  • Size

    80KB

  • MD5

    f06078631793c3af3d431c2ffdc6ae10

  • SHA1

    ca7b9d44a1ffe0e194bcc1c3128e98c4b62d607d

  • SHA256

    30800674df26d525bb7387b32da955bb36fb256b70d3b90371a67259708bdfcd

  • SHA512

    c9ad07963da5876ab42d7c445a5273ed58fe122bc26d824f84fe3200e28a9aec41cfb09bad2eb4ed5408d0b63599df8d537fb39435898bc0234a1c44d81a69bf

  • SSDEEP

    768:ofMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uA:ofbIvYvZEyFKF6N4yS+AQmZTl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_f06078631793c3af3d431c2ffdc6ae10.vir
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections