General

  • Target

    virussign.com_88a9c44b55ea06723b829e05dd308c20.vir

  • Size

    84KB

  • MD5

    88a9c44b55ea06723b829e05dd308c20

  • SHA1

    17bd49687a0b0072131c3c3686b01084a72e882f

  • SHA256

    ce3a70e1088bc32fe561710b6a2173cafc943cddc1dd9185a63ff9648ac5b750

  • SHA512

    185d422bbf4dfdda201dc61739c230123f11372ef613ce6160294cdcc55c6a01e3f842e70eff25edda61b1eb7cd3330a70f699e6cc59455d2964a38d2e2fb00e

  • SSDEEP

    1536:pd9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:pdseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_88a9c44b55ea06723b829e05dd308c20.vir
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections