General

  • Target

    90284c2b0acf6d6755deeb26c5ebb560N.exe

  • Size

    248KB

  • MD5

    90284c2b0acf6d6755deeb26c5ebb560

  • SHA1

    f95ca76dd41f850d1b335f508be4aef62c42869c

  • SHA256

    f38e5cb8690e1d12d5810f0e052f4f00d22c3c60cbedf52baa0efb2f479147f4

  • SHA512

    c6160713a86b85e80a27496f8836adbdad92483b6983c3f38ba8862f9d3f81f21904b28612dd5e27be8d7534cc358f633f0fa555a2b97beab0ea6af105a72dbd

  • SSDEEP

    1536:y4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:yIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 90284c2b0acf6d6755deeb26c5ebb560N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections