General

  • Target

    7e5d54619f5f99d5ccb3cfa51e1b6da0N.exe

  • Size

    316KB

  • MD5

    7e5d54619f5f99d5ccb3cfa51e1b6da0

  • SHA1

    dc9c1518246f0b8d918d070f6d2cfd897a2447e0

  • SHA256

    f4a96017c9d48a136133b44b8ed0b752cecc70c4ad1e851e8c282d737a24c9a0

  • SHA512

    e6defacfd8291e1a63278bebd5993427a005752db02eb420705cf273b6799fce74a208bb3b7855bd3e268dab7c2b675d2dc6ec717cf41bc5b718a5745cce6285

  • SSDEEP

    1536:B4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:BIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e5d54619f5f99d5ccb3cfa51e1b6da0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections