General

  • Target

    virussign.com_1596fd2046f72a6f9053d53e344a5fe0.vir

  • Size

    62KB

  • MD5

    1596fd2046f72a6f9053d53e344a5fe0

  • SHA1

    1972232e9b7a5bd3ae3d998b35dd20f90559b486

  • SHA256

    383c5536be119f172b2fcb1862e11ae97638f80f34e3bf18b5e843cd6fcac585

  • SHA512

    db5d240b0941ace501543e464d221e49b09f30d823c92568d6d3657ee79885909773d5f2f64aaf2f8e71f27e951daea7ecf9f4b2c202d99d1e424555434ff927

  • SSDEEP

    768:zMEIvFGvZEr8LFK0ic46N47eSdYAHwmZQp6JXXlaa5uA:zbIvYvZEyFKF6N4yS+AQmZtl/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_1596fd2046f72a6f9053d53e344a5fe0.vir
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections