General

  • Target

    e1d044e53f5bb0bb74b5712e6f3e65d0N.exe

  • Size

    35KB

  • MD5

    e1d044e53f5bb0bb74b5712e6f3e65d0

  • SHA1

    33cbc5989d8b87c7aea6f641b3fb231b0dfb20a5

  • SHA256

    e29c52794d918d7b25febcfebe376db0566f482542b74f33eab385b10863856b

  • SHA512

    2d24923a4b101061618afc981f54c34546c8747ceb0b612e3cbbc888c6c66a4f7e2f027d223c9d7d042e371b53e8a40fbb45a44c061850cfa169e453df4a2342

  • SSDEEP

    768:26vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:N8Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • e1d044e53f5bb0bb74b5712e6f3e65d0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections