General

  • Target

    08f7af31a6ca42eded90eab08318e890N.exe

  • Size

    248KB

  • MD5

    08f7af31a6ca42eded90eab08318e890

  • SHA1

    233a5e1e7df87a281ee98bfdca8f90f449e71eff

  • SHA256

    0b617e1490512f32019e189fab1218f24ff7a80f966a7b74e2cb5c947bb62cec

  • SHA512

    f04bb77f86d733005cad0310c7962d5093a06aa6072d3197331ee71489ba384b5cc9f8159d91951f736ec0f1aecdc537806c6b3684c3eacf450a6a7bb8b12f94

  • SSDEEP

    1536:04d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:0IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08f7af31a6ca42eded90eab08318e890N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections