General

  • Target

    374114f67756e87a32805f8e4b710110N.exe

  • Size

    248KB

  • MD5

    374114f67756e87a32805f8e4b710110

  • SHA1

    596bf63efc8fb67d2714f4ff0b0249ad5712956c

  • SHA256

    de600c801b7d6e507fcfa62b07f6faa4e3e032113b9eeee12715baa1ff045652

  • SHA512

    e2aff0d9574bbe0d1c153fd09ceb7505c5397f582e26685e8449831da62a69639daa6e820aefcb73b553f3e4751131a7e840841f111f98d4d08e8f8ddf95aeed

  • SSDEEP

    1536:34d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:3IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 374114f67756e87a32805f8e4b710110N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections