General

  • Target

    294235afd6e8caaab308b3ed3e697980N.exe

  • Size

    316KB

  • MD5

    294235afd6e8caaab308b3ed3e697980

  • SHA1

    e98eb1159597e48aacc65867f91978c75c8841ac

  • SHA256

    e2b18592dcf072c140b02ac8f9f22e1458c9f592058245052ce8cb63b344ab9c

  • SHA512

    77a3586ce41cd568bf41f71f64358beb2484ec9932567f55fb7b6d6c9b501586655cee2071b764830d600be1202afa09c7b5a03690f9fa41cd653de5c367beaa

  • SSDEEP

    1536:t4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:tIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 294235afd6e8caaab308b3ed3e697980N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections