General

  • Target

    035ea75046f9b87bf510b3aadad0fc30N.exe

  • Size

    248KB

  • MD5

    035ea75046f9b87bf510b3aadad0fc30

  • SHA1

    f79bcba916353a484dc9849295732277731356f0

  • SHA256

    8f04adc6bff553065d89921e440197fe1df57b1692b9cc691028fba45fdbe811

  • SHA512

    e2cedd8ccd93ccb5eacf043d5990027ce6904f41e1b4df2aa99ee1ac55649fe8fd608b5436d22666ebb47b97f7018a9b2b949457f47ad62cb408be7275620e11

  • SSDEEP

    1536:84d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:8IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 035ea75046f9b87bf510b3aadad0fc30N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections