General

  • Target

    75d752607d1b8b888382d3eff4cd5c40N.exe

  • Size

    35KB

  • MD5

    75d752607d1b8b888382d3eff4cd5c40

  • SHA1

    1ffe2530e780fb0deafd1b88919053d3ea8e99bc

  • SHA256

    975ce6703ebd7de4b77aeb2cd06423ae435d7d5769aa4ecbdf71ca3a90f69c64

  • SHA512

    c8866e2193776491e0e76c1c05c21b5e9524c0efe1e4682162a28b71c6812f8f44b812669eb8b4c9844b3691c5b2263b9261038f21f40ceb8427b9fdf00a6a81

  • SSDEEP

    768:I6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:P8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 75d752607d1b8b888382d3eff4cd5c40N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections