General

  • Target

    944e5caf5ddbca4c8d670597d486e760N.exe

  • Size

    248KB

  • MD5

    944e5caf5ddbca4c8d670597d486e760

  • SHA1

    1f906008a90bc8b2f77c2968d357e47c22f64744

  • SHA256

    0a99317e389e68e4ae086d131f194ed338486f3280ae54e3c0dfdcd340f8729d

  • SHA512

    798ae2acacb330d4769ce92cf467ae4fd8e41bce90ed35032b2ccd0bf5b0655cf359c8b9ec7a20a01a704091d2aaf3539ba43e2992d3ec06ee1d5f9fd8cec56c

  • SSDEEP

    1536:c4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:cIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 944e5caf5ddbca4c8d670597d486e760N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections