General

  • Target

    0c11e21cde5de4e4d7cc16f2ba824920N.exe

  • Size

    248KB

  • MD5

    0c11e21cde5de4e4d7cc16f2ba824920

  • SHA1

    6edd7f365d2050f5fcceadbe2af1698ae4d2c74a

  • SHA256

    0f6f998a6506ca1388136ed189eb64ba73ed4246fe448c4c8df1df241a80c031

  • SHA512

    64e3a43c536721c68376f70790f092dd8b723804bc80a8e7849085bb0c9f0bd7c7e75835b7694eed4c47c765b2dd0d0855e6c6da564ab0174735258a447b6b65

  • SSDEEP

    1536:A4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:AIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c11e21cde5de4e4d7cc16f2ba824920N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections