General

  • Target

    08243447e50bc9964552654a8490b8c0.bin

  • Size

    248KB

  • MD5

    08243447e50bc9964552654a8490b8c0

  • SHA1

    83b59500f62255b8eeda29f779218803f1f967bc

  • SHA256

    825043569b685690c57084e48ff0598cef02bbe49f591f180e78306d3e1a786a

  • SHA512

    a3e841ad49034bfcd75d89cd2cfd8168c9ad303cca9d20df3ac0b4ea6a8041a3510cde904a7ffaf87985e01c750ce96f7a81027b43bf92085f7e666d5782d0ff

  • SSDEEP

    1536:w4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:wIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08243447e50bc9964552654a8490b8c0.bin
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections