General

  • Target

    3e70f4df27502f73ecb0808d58d9e410N.exe

  • Size

    316KB

  • MD5

    3e70f4df27502f73ecb0808d58d9e410

  • SHA1

    55667890c01f64891305daf1260a533de82f9c5d

  • SHA256

    eecaad649fab4b65cf49e1e9f8b74e534f68acc0564f20ece261d874aaea2494

  • SHA512

    e9ad79f6dcb7c7eeabd07a66fe7769eee57f72eae004f7bc49b1f84068438392d81c47d4c0080734e5c8a22b927fb938b8cf7f012cdfc830c0c73f64ce14ae50

  • SSDEEP

    1536:74d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:7IdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e70f4df27502f73ecb0808d58d9e410N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections