General

  • Target

    7feb6d1d3043ac0281b06b658b202b20N.exe

  • Size

    35KB

  • MD5

    7feb6d1d3043ac0281b06b658b202b20

  • SHA1

    27894a01067eee02077822768ace348740187c94

  • SHA256

    35da3592c38c2a7a96606bbbe34b3f7fb3ca6c64635100cfe81d8ac303e8c7a7

  • SHA512

    08dc280c7131beebc12c87ba61567d7b41c36aff263bdf54969798f051876f77db751273d22cf0c06cee903c873c40f039a9f27f7b2a2e4ac269b4d1a1d88224

  • SSDEEP

    768:n6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:68Z0kA7FHlO2OwOTUtKjpB

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7feb6d1d3043ac0281b06b658b202b20N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections