General

  • Target

    virussign.com_08a01d8ee7fc0df33a508e21bb8ceac0.vir

  • Size

    76KB

  • MD5

    08a01d8ee7fc0df33a508e21bb8ceac0

  • SHA1

    fae4bf0b488ee1a11f7589d33c693aa28c30fbcd

  • SHA256

    3d1a9ddaa8b4d6256c1f25f6fc4e281bd85079ce5acea705604de9daec42b900

  • SHA512

    b18c43a0fd339cd315012e760f3e8e963fa75bc2740ae469b3fd6bea41bad258ee3e9d420c808c54d49ef8dbc4211e27dd8fafaa3b1af455696ff7ce7e2addfd

  • SSDEEP

    768:WMEIvFGvZEr8LFK0ic46N47eSdYAHwmZGp6JXXlaa5uAW:WbIvYvZEyFKF6N4yS+AQmZTl/5O

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_08a01d8ee7fc0df33a508e21bb8ceac0.vir
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections