General

  • Target

    c36b66fdb4ff8bc0bf0651dd56b19ef0N.exe

  • Size

    51KB

  • MD5

    c36b66fdb4ff8bc0bf0651dd56b19ef0

  • SHA1

    7d71c023088466160bb1936d8bb6e7548854106f

  • SHA256

    436885c7dc879a36015ba8ea21e92b7b68b319576c2477debb5d21aa79ec6222

  • SHA512

    a068f153e1252bbe686104311621d05b1ad5f7503f346180cd5df8364c8fade388bb05367b749fc86da79f489b1b29512b5be4c14c4c30e3a44d620ed4f376c3

  • SSDEEP

    768:4Y6MYKJnGs3bcJPyO2dqhIPDiiJElp+jV9rmltavrb/yWIl9kH11:4YJ7Jx4f2AGWUj/rmltaTGPQ11

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c36b66fdb4ff8bc0bf0651dd56b19ef0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections