General

  • Target

    f83fcf0ae931037ba2da178f80abcea0N.exe

  • Size

    248KB

  • MD5

    f83fcf0ae931037ba2da178f80abcea0

  • SHA1

    12010e310590cc7011f0c34f29b73afaeb5a2f43

  • SHA256

    45b26778617e32b7a051224072b3c9488cd4ee1d73d121e59ef2c302c19cb756

  • SHA512

    5bc99012fb69f2926f93312d2110f2d57af8cafa007b7e3911a6b7eeb672b3afab9b7fdb6c0c86e38b44a6863dc5eb685f91176aa846978221ad50d4591988aa

  • SSDEEP

    1536:44d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:4IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f83fcf0ae931037ba2da178f80abcea0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections