General

  • Target

    bb459b5acc3e875d3f85901c1eda4a60N.exe

  • Size

    316KB

  • MD5

    bb459b5acc3e875d3f85901c1eda4a60

  • SHA1

    b6ab13c3719dea6f21162368521df82c08cfef57

  • SHA256

    a903ff646a0bd9773aee716a6b2f2aa9c5d568629a3e36cb3569671107c96eb4

  • SHA512

    5ee0231c3f9b7775638a80ea6708ebbde7266d8f3abfcbf05980f020c41f479346d34f58a15b6373febba66e644132b18be392814762cf633ead19140c1a6a25

  • SSDEEP

    1536:G4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:GIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb459b5acc3e875d3f85901c1eda4a60N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections