General

  • Target

    bdb8a2d851f68f520db79a9711d5ea31dfac2111ed5297bd870e503ecd0b5f8f

  • Size

    316KB

  • MD5

    a477642d0f3d937254a8d6e3440ca427

  • SHA1

    0f186def4dc3a87e19e8e8ce347d188276bfced3

  • SHA256

    bdb8a2d851f68f520db79a9711d5ea31dfac2111ed5297bd870e503ecd0b5f8f

  • SHA512

    b2a3787cacaab9df8386e7721b64c6c8a399e2c136b5a5ebafc18d3dba3502cbf591d308498f2c579b719e3701b9cbb1f8957281bdb2955a7caf41018cf29628

  • SSDEEP

    1536:R4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:RIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bdb8a2d851f68f520db79a9711d5ea31dfac2111ed5297bd870e503ecd0b5f8f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections