General

  • Target

    66c730449246fda4f7f0cb868b0ac060N.exe

  • Size

    316KB

  • MD5

    66c730449246fda4f7f0cb868b0ac060

  • SHA1

    86cbd1a86ec6f4870edbbb35ff6134352d689449

  • SHA256

    682d2449bf9df3ae21bf7d3ebe974d5c0dbaa6f794af1e6c6096b847f581abe0

  • SHA512

    25a3d33ed34a9253369f2a3e073b15928b33c8ff11c954906f23073d19c761b61069f16c2b8d589cd39d678e7176d30ae7e59697e382bc1f2c639949f6d94693

  • SSDEEP

    1536:74d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:7IdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66c730449246fda4f7f0cb868b0ac060N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections