General

  • Target

    476bda222fe15880d16abcacf0d56af0N.exe

  • Size

    316KB

  • MD5

    476bda222fe15880d16abcacf0d56af0

  • SHA1

    460e6f253d1dba8a7e08a3709377af48902b88bb

  • SHA256

    e318b1459d848b7522264bb9418aa8505754539cc3df424a97b3c3c4c105fb72

  • SHA512

    60d90defd2e8ee0e7fbf53cd0cb5cb3509995e9e775f5cf2acd08e4c82f9eae158759ee28e9c37daf08e8f91c44f0adc7aa8f35ed67989fb2e20e36089171956

  • SSDEEP

    1536:A4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:AIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 476bda222fe15880d16abcacf0d56af0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections