General
-
Target
be907df265b51dd5d79f4a4826f99f3a778a9b746b46329a4ea2ad4b85e919b7
-
Size
316KB
-
MD5
8c707dae2d0b10403d62b0553e06cac3
-
SHA1
97c2adc618b9c205c86f597ef5b0c6840c3ce58e
-
SHA256
be907df265b51dd5d79f4a4826f99f3a778a9b746b46329a4ea2ad4b85e919b7
-
SHA512
8410dd44b50acc67801c048295fe4ba5e76041f185c7a8371b31dacca2a38ba311dc54acd58c0c554ecb3e56aa52f5335ece1087733cd160d0340ecd0335d902
-
SSDEEP
1536:Z4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:ZIdseIO+EZEyFjEOFqTiQmKnOHjzU
Score
10/10
Malware Config
Extracted
Family
neconyd
C2
http://ow5dirasuek.com/
http://mkkuei4kdsz.com/
http://lousta.net/
Signatures
-
Neconyd family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
be907df265b51dd5d79f4a4826f99f3a778a9b746b46329a4ea2ad4b85e919b7
Headers
Sections