General

  • Target

    e5e664b4c7f61c66dce3c3f799b48640N.exe

  • Size

    316KB

  • MD5

    e5e664b4c7f61c66dce3c3f799b48640

  • SHA1

    f69429db1ff90009e732b676dcaed9143c60aad4

  • SHA256

    a6b3d76e36e3f173d2d8a9243bda60b7cfadcef73dd600914e89341554e775e7

  • SHA512

    e964692c087fce6b826eb53c902dfce1b5bea7cce495b3f02c95915c60855a055494f4b74ba29d618705581458629467a9c7a01aca90252416ff7cd50c0c15c3

  • SSDEEP

    1536:Z4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:ZIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5e664b4c7f61c66dce3c3f799b48640N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections