General

  • Target

    a00fe3a2c55cd63807c35ccf89171830N.exe

  • Size

    35KB

  • MD5

    a00fe3a2c55cd63807c35ccf89171830

  • SHA1

    cf1ae9ff4aad8776d068fd982d1faf35c84dee30

  • SHA256

    06d6b7a7a3a0e29902f581826dc400375327c0737f12e6c7155c6fdde56373a1

  • SHA512

    5b13d2cac4bd217bb937c026343285a679406b709f18c1e3aba27a8d5bfb4270b17179359dc4b7b575fd944b52985b45fc7590942f4ce04ff87a16eded1592be

  • SSDEEP

    768:A6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:X8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a00fe3a2c55cd63807c35ccf89171830N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections