General

  • Target

    d1ce3caaf45fe4354302012e17f53170N.exe

  • Size

    316KB

  • MD5

    d1ce3caaf45fe4354302012e17f53170

  • SHA1

    cc2a5763a66806a43d678b006ab2880dba517dc5

  • SHA256

    06de7548e38226e82f1eb15c51453e399c8db9873768411a95e1c7757cd9aa88

  • SHA512

    4610afb92999673345f5bc10248aad1a74fde88a09af1841df7126997570e2478550ed4b94123d89d79c029ea27fce446af9f33f9242cfcfc70f3d870fb8e612

  • SSDEEP

    1536:O4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:OIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d1ce3caaf45fe4354302012e17f53170N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections