General

  • Target

    9528a5bafa8601e45b60d0f79ee14e90N.exe

  • Size

    248KB

  • MD5

    9528a5bafa8601e45b60d0f79ee14e90

  • SHA1

    5574381fa61689e48eafb92637ce6ca562d6aab7

  • SHA256

    37eab1500adc6281f3e0e6f117414239a0251322398b16651236bb94d5884151

  • SHA512

    6043d2b5e2261389248750c4926d47a12f8359c436a51c17827b82de4ea080192dcc66cff965d07b345132a7360833f133169b77343d67ad8a92d158d85c4c2b

  • SSDEEP

    1536:24d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:2IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9528a5bafa8601e45b60d0f79ee14e90N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections