General

  • Target

    e440b3507a2b3d8f96deffba6761b310N.exe

  • Size

    248KB

  • MD5

    e440b3507a2b3d8f96deffba6761b310

  • SHA1

    3d1bf81d7d70e94a6d8ab5e45acefc24f8ab30c2

  • SHA256

    0004567c1df9032867c9761be04e579c1b0edb53d98f0085e45927ab456a0f64

  • SHA512

    ba8ea2bb59e09d1dd3fd5da835a40055416dccff11b315a5a1e1b351724b4bc2b74360ece56b7bdd3ca4e8a3da25ff193f9ca907648131b46b7310dd36bc5f77

  • SSDEEP

    1536:I4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:IIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e440b3507a2b3d8f96deffba6761b310N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections