General

  • Target

    2610bcf86b11c2f8aea5d2d8a0b9a5e0N.exe

  • Size

    248KB

  • MD5

    2610bcf86b11c2f8aea5d2d8a0b9a5e0

  • SHA1

    49e7a04c63486faa128ce9f521cccd657292f24b

  • SHA256

    3cd00bd31b753d832e83b5c7d1f7fca948706dd01144621a4a019322910e47c5

  • SHA512

    08af2402e91ea77fc3b0f7d23d44bc6cd695a3a0c48e7222c278e59e9d7e8cbcb84edbebfdca1e1111c48a32c4d0bbe5c3347c1d51828dac7228cc819d502cb0

  • SSDEEP

    1536:j4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:jIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2610bcf86b11c2f8aea5d2d8a0b9a5e0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections