General

  • Target

    0e7df259e5d741adfc8019a4f3bb2a2a780705a1a1c3f84d413ec9840ad9b026

  • Size

    248KB

  • MD5

    45443ec73bcbf787c300f21855f26dde

  • SHA1

    bec2a7d298c44b04a6a41024e34a874980f1fada

  • SHA256

    0e7df259e5d741adfc8019a4f3bb2a2a780705a1a1c3f84d413ec9840ad9b026

  • SHA512

    6a5af3117cd603c004ee95082174ae441c58797c2db7ef784ddb01b9ac594494357da51cbd97d574b7bfebfcd082e2dc1f4abcf6165c3452e3e96c769b69188e

  • SSDEEP

    1536:b4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:bIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e7df259e5d741adfc8019a4f3bb2a2a780705a1a1c3f84d413ec9840ad9b026
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections