General

  • Target

    4e404b6db838aefebe8eb15ee95f0eb0N.exe

  • Size

    316KB

  • MD5

    4e404b6db838aefebe8eb15ee95f0eb0

  • SHA1

    5e55b80f21b771afc68fd1901a17f77f18761d7e

  • SHA256

    9c665a6e794fa241cf7b73ab36c37e57fe70fa94e2b43b2019b156dc41de308b

  • SHA512

    449014f26f4a5242f4a8c59f9ece30ed1d11e43f6d182859e61fa90f6dc51d5f0a76e4e9f9059fea08c1ecd2e94f826aac71769cf1f0f3d19c0a3db7481673f1

  • SSDEEP

    1536:h4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:hIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e404b6db838aefebe8eb15ee95f0eb0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections