General

  • Target

    ae650f02344a55c381d24115c4481190N.exe

  • Size

    248KB

  • MD5

    ae650f02344a55c381d24115c4481190

  • SHA1

    1e164fc13a150cc16939c51d851b73b3873a1171

  • SHA256

    ab5f27d12db62217261331e3d2785bf58b0feb7ea852f8656c1e2f1f62f3361b

  • SHA512

    e727f4c1ecd04ba33e2f2132c07f64a7d26a3011ce0ddec19059a73964d1475dccbaf6368da06ce93a0643cf2503d4851e2788d5dd8446476119c0c0dfba47c6

  • SSDEEP

    1536:84d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:8IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae650f02344a55c381d24115c4481190N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections