General

  • Target

    51b904cfb017a458321232a72169a030N.exe

  • Size

    248KB

  • MD5

    51b904cfb017a458321232a72169a030

  • SHA1

    29d837849655920da0663acf87f564084468e77a

  • SHA256

    f09f5fbedc87c73c3a49e9f894c1bc35811d52077dc1d7b209a5e4c784b16e76

  • SHA512

    7ab3c71d74ede056522826d9e6cbdb9e5a0d463d42487f6e0386c2f77bb30082938737b4ee8473e0abe4b880df691d8e39541056bd4770e5d3ed799beb1bab69

  • SSDEEP

    1536:T4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:TIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 51b904cfb017a458321232a72169a030N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections