General

  • Target

    737766545bfc2cec22393a86c4da1bb79c1a6324b6e78bf422724ae47b5e0e61

  • Size

    35KB

  • MD5

    aaf661e96a46f7de525c176893044d76

  • SHA1

    f8ad8f6002f7081b61979b155830e466cd8434e2

  • SHA256

    737766545bfc2cec22393a86c4da1bb79c1a6324b6e78bf422724ae47b5e0e61

  • SHA512

    da27e5d44c75ee5c9268660bc9bc77c44e7d654d0171471cf10e837f9c11e7af6d68a268f57e5ddc07d3d980af770f5c326682e2e12d2f65d6caad09ca472292

  • SSDEEP

    768:06vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:D8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 737766545bfc2cec22393a86c4da1bb79c1a6324b6e78bf422724ae47b5e0e61
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections