General

  • Target

    357afaf2ffe639788c91c4dbe055d480N.exe

  • Size

    316KB

  • MD5

    357afaf2ffe639788c91c4dbe055d480

  • SHA1

    b99843fd1ac660c519347a796ff395b10366dd6b

  • SHA256

    71b49b5a41b319d882410e0c23af8c6dd55664ef9e5f4ea1decaa1c587ea74c9

  • SHA512

    062a1edf2c1e25331933c4dad841f33d6978f7945d15463f6a5977e264a74006888195e6070dc9c647f7b1d486d9831bbac7a1a2587ea18a28481e2cc21b72c0

  • SSDEEP

    1536:d4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:dIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 357afaf2ffe639788c91c4dbe055d480N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections