General

  • Target

    0fcbd8f2b1ac9ff3571ece4e05888250N.exe

  • Size

    316KB

  • MD5

    0fcbd8f2b1ac9ff3571ece4e05888250

  • SHA1

    632e0124de6152c755847e068604b32970c2184a

  • SHA256

    5eb756c1fc4dd74ad9578a14418585a1ca259a972fc710c3c00659ebc2bc2b3d

  • SHA512

    1c883c46f58168c4a458174505ed4830f028f2119b954605cffa05b9553da74aed8be4e84f52320c7a5d3de088742775f8115050c565a8393cf4cbad805ce782

  • SSDEEP

    1536:E4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:EIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0fcbd8f2b1ac9ff3571ece4e05888250N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections