General

  • Target

    27b8cc542d173d558bc51dc99000efe070dfeac9ec4aceab2f77434ab5a5ce91

  • Size

    248KB

  • MD5

    27aaabff0771506577d1497df8ab924b

  • SHA1

    1dac3241467cfda2cdc6e9b7626a8a0331b97719

  • SHA256

    27b8cc542d173d558bc51dc99000efe070dfeac9ec4aceab2f77434ab5a5ce91

  • SHA512

    80ce23d9dd0cec070bb35737cd0b6b6482c7355f8adec1ea7877abddb3431ee45b6049f0f832862b303d5e53d4c6fb1f78dc80382e6acea0911ebaf2f0648b60

  • SSDEEP

    1536:24d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:2IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27b8cc542d173d558bc51dc99000efe070dfeac9ec4aceab2f77434ab5a5ce91
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections