General

  • Target

    39b3d666c650bc7d425b36df40385330N.exe

  • Size

    248KB

  • MD5

    39b3d666c650bc7d425b36df40385330

  • SHA1

    e7c01e03d18645524eae5aa288f889be942ca905

  • SHA256

    173ff5a1c21267000f6cb4b67d5b8e56c2ba600bc149881c917fa4d41e425bf7

  • SHA512

    283b818ed2a9723591082f7cba0d7920e608d6cf4ecf59bba9ac66ccdced9283c23d18f7a07f0a4d70fa5dc99d40e3e77143823d5c73e26ea3de6055e7dd860d

  • SSDEEP

    1536:E4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:EIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39b3d666c650bc7d425b36df40385330N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections