General

  • Target

    virussign.com_74cadb39c29e47f9d8d4d973c0f92620.vir

  • Size

    88KB

  • MD5

    74cadb39c29e47f9d8d4d973c0f92620

  • SHA1

    4291b478c93e1029811113a664d24eed73323a63

  • SHA256

    574685c1d58583cc9eedb8d6bd9ac3cc0cb31f986e65a792d7001f78512ae472

  • SHA512

    139ac1bdfcfc19adc061760f6985eb93843a26869826c1657b9052e7f29de89acde82ac43932fb77cc278ab698752533a3ad89af7854f734f09558dd413742b8

  • SSDEEP

    1536:6d9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZTl/5:adseIOMEZEyFjEOFqTiQm5l/5

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virussign.com_74cadb39c29e47f9d8d4d973c0f92620.vir
    .exe windows:4 windows x86 arch:x86

    08b67a9663d3a8c9505f3b2561bbdd1c


    Headers

    Imports

    Sections