General

  • Target

    53db3a41c717556f64a9e44ee95a0b10N.exe

  • Size

    316KB

  • MD5

    53db3a41c717556f64a9e44ee95a0b10

  • SHA1

    bab8cfc647565e7bad64568a288867a28de694fd

  • SHA256

    70af7f029b06de24481f0cfe6519202204a2ff4f0f3910e6b95b24faa8e6cd73

  • SHA512

    ec564b4f7b321203fb478182ab8ae0a7ee4d609841e7d272aea3511e1fbb06b18d342061c3008f82019f4e3e804a761a74fbf34b4cad3e4b3e9d61ffb628f3cb

  • SSDEEP

    1536:t4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:tIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 53db3a41c717556f64a9e44ee95a0b10N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections