General

  • Target

    9fc047a05a7da95ccd7eba718b85fd60N.exe

  • Size

    316KB

  • MD5

    9fc047a05a7da95ccd7eba718b85fd60

  • SHA1

    293782ab0156a6511dc52c7e4f08cb9c8231d797

  • SHA256

    c3fba2a3e5bbe90d3aa9d5e72fc846ddd798e96c08905594ed92d36072b609e9

  • SHA512

    5fb44cfd00ce9c66a963a30d212d9ea628bb29ddeba2d149ed67d247550632f12091ca765f603cbb2173555590ce78ec28cb64303ea25201a7d925ef61fed54f

  • SSDEEP

    1536:a4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:aIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9fc047a05a7da95ccd7eba718b85fd60N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections