General

  • Target

    6bac14c6e413417584280ce8151e5350N.exe

  • Size

    316KB

  • MD5

    6bac14c6e413417584280ce8151e5350

  • SHA1

    fa1b2f9e0deb3662738bc15c48cd4b367ea390a6

  • SHA256

    0085983bcccef09918568d56808b36fb28db70aed6ccd006b99d9f48bd10be40

  • SHA512

    08eef1bdc0e694f7f6971d8ced61b44a26e40851aed200a3b4770bc5337a5fb10a7cb12428e0bbc409aae9e6ee53d2421772c4195670d744482266ffeb8cf44f

  • SSDEEP

    1536:K4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:KIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6bac14c6e413417584280ce8151e5350N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections