General

  • Target

    82b6a92ba9ef1ccc293c7827c9e40c10N.exe

  • Size

    316KB

  • MD5

    82b6a92ba9ef1ccc293c7827c9e40c10

  • SHA1

    a4cc5c60588e3b6c3fd0661614207f134e86fa7d

  • SHA256

    b397c7c76da91dd088ef08a7d004c95193b5a94a8d0a89ff907efa2e0992f378

  • SHA512

    6324189b1c30c5d6a9fa12558690e63e41a191926201eff3497f2ebea225c4b5c890614fe173ee0dd5dbe350cd68f2e8520a8e913ab897d70bebef7a8fa59470

  • SSDEEP

    1536:G4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:GIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 82b6a92ba9ef1ccc293c7827c9e40c10N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections