General

  • Target

    2fdad3b8c30993da82018fb34644fa60N.exe

  • Size

    248KB

  • MD5

    2fdad3b8c30993da82018fb34644fa60

  • SHA1

    79a2cba3214f6da26401e1473100da59ffecd3e4

  • SHA256

    66782b5d13a0f15ce2c1b96a21b902722a594223c6f79e17858059d1068496a6

  • SHA512

    30ea7256cfcbc232ad058b7bfcf4af010488fe5162684695f7f6d532026f27c9724fb78753f31355eafd35d9c6e2b903f0af7fcc1bf9a81d6d84a7ed00355f98

  • SSDEEP

    1536:Q4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:QIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fdad3b8c30993da82018fb34644fa60N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections