General

  • Target

    241cceeae19bdf5df79fdf2a89c86b9045c3ec5ffa18ba2743b7ca15b539d72b

  • Size

    35KB

  • MD5

    99fd5564b0fb45bc284295aa4a708213

  • SHA1

    f0518dd42978dd4932a3cae64799405cd44eb212

  • SHA256

    241cceeae19bdf5df79fdf2a89c86b9045c3ec5ffa18ba2743b7ca15b539d72b

  • SHA512

    e658a5eb831c88d14680916dd1a68de55c1f73dca48f7f53780249911dd1121d72a17a5f57bfa8e7d7a0e1f9647af91089ba702bbf2fdaba1a5c963b2b0e1fcc

  • SSDEEP

    768:S6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:B8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 241cceeae19bdf5df79fdf2a89c86b9045c3ec5ffa18ba2743b7ca15b539d72b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections