General

  • Target

    cdbec37da7e211d89c93f134e419d8b0N.exe

  • Size

    248KB

  • MD5

    cdbec37da7e211d89c93f134e419d8b0

  • SHA1

    c802a35504add0d97d20437a7f8fb3f77f034460

  • SHA256

    b8d9d5ef60fb84883aaa612b37bf73ea01a65c314d009fcec060494e35606da6

  • SHA512

    aa3e418562c983252aa308ec1febdccbad8db8013563902b13202057e2503111f000b933cd8be0b1a9af45d27483d05f97558321f7cfdf026bd93305b1bb3b51

  • SSDEEP

    1536:w4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:wIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cdbec37da7e211d89c93f134e419d8b0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections