General

  • Target

    9213c5fe383d469f29c77dcd5ed227b0N.exe

  • Size

    248KB

  • MD5

    9213c5fe383d469f29c77dcd5ed227b0

  • SHA1

    4a8cd12660de13c174e93ca418311640fbe3e44a

  • SHA256

    b05d4c1a27d610f4e8196ba2c33b183dd4c83dadfd6b1f1676c7c529e36b9dd5

  • SHA512

    bb9e5e32c232b545750b382083187015d8b4103afe113ca6858d8135a3d22c91332b5ca8fa7fb8ed0a916793c666cb0b79e27730d4e3e0a4294f7680c8890a90

  • SSDEEP

    1536:y4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:yIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9213c5fe383d469f29c77dcd5ed227b0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections