General

  • Target

    cdb88ff0a9a1aab828f15ea31109c040527828e693eac7ccd21a9aae2f82508e

  • Size

    248KB

  • MD5

    ebff2514f024f41c886af80c4154634e

  • SHA1

    62fa80cfb50daec7f84c519a5e0e44032b0b1857

  • SHA256

    cdb88ff0a9a1aab828f15ea31109c040527828e693eac7ccd21a9aae2f82508e

  • SHA512

    90b87cb3eb87101aebba92555d397d859a6a2a5a5a6479d59b753846ac97b3924dae608114fdfc24fd8b8a8dd2cd4e7070304f15784da1cc098a5d6c388fdf79

  • SSDEEP

    1536:z4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:zIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cdb88ff0a9a1aab828f15ea31109c040527828e693eac7ccd21a9aae2f82508e
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections