General

  • Target

    bc60a975e1d3cbaf8028fa487f772fd0N.exe

  • Size

    316KB

  • MD5

    bc60a975e1d3cbaf8028fa487f772fd0

  • SHA1

    476066c08a2a18000ee0de45fd83420787b8b6dd

  • SHA256

    da8c796c9b78905fa33ef52e55682a0ac9d4202edba9d0648fc8f3632e3bb69d

  • SHA512

    9fdcdd2c0fb78dac354f66bb34e32b7baf59065c1bcf5602f8f4ea4b1df80b216ba2c972a8c4b8cd30a628b75d03018f37e9abaeb9f825a1639ea5b1e9c9ab05

  • SSDEEP

    1536:N4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:NIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bc60a975e1d3cbaf8028fa487f772fd0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections