General

  • Target

    db7fd9d0c2d889846bada4b4a8834fc0N.exe

  • Size

    316KB

  • MD5

    db7fd9d0c2d889846bada4b4a8834fc0

  • SHA1

    3222c11400124cbdf4ba2fc60e94329e36ee0651

  • SHA256

    9f50f624547e4e800737e131524259ee09c6454e1821de6c34aadf1d58029cd6

  • SHA512

    a321808f42086abc4c31f761cf7b7417a99dfe25b450cb3aa7197dd44598a885fc414825e954d89cd46f6968d472224f0344941db169f9abb00a6523fa48e148

  • SSDEEP

    1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:nIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db7fd9d0c2d889846bada4b4a8834fc0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections