General

  • Target

    3059c606d66d1224382a7bc3fb735d30N.exe

  • Size

    316KB

  • MD5

    3059c606d66d1224382a7bc3fb735d30

  • SHA1

    3cabaf886a99c0fc0dfb04e57311ca53fe315849

  • SHA256

    5f1b2a3cea2d8628fc2ddbbf204a2625b3fbd824db307ad56cac2df4753c5d2e

  • SHA512

    7d47fb8d959eb29f12277e16006a80b1cf3bc47fd20cd30664eef0866d9a3afe0a103902faf3eda762253aa2c4f82238da7f818eb43cfbb9c934e67696c493c8

  • SSDEEP

    1536:r4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:rIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3059c606d66d1224382a7bc3fb735d30N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections