General

  • Target

    22f1e5353660bc612766d2e84b4ffe62ae909a88821640bc7ae4acf66308f02a

  • Size

    316KB

  • MD5

    6bade6d433ab127ab24f57387717ea5b

  • SHA1

    c2c484ed1e1f8fe1f04b8d822c9beaf7a108cfbc

  • SHA256

    22f1e5353660bc612766d2e84b4ffe62ae909a88821640bc7ae4acf66308f02a

  • SHA512

    ff399e5ff9e7eb7813f17caf0b5ad3844b6f886dc9a27e94a3ee8848081e179f1ae23d603781c143f4cc799375133173a4b45301d46faad60b6a1d8cf2e8192f

  • SSDEEP

    1536:n4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:nIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22f1e5353660bc612766d2e84b4ffe62ae909a88821640bc7ae4acf66308f02a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections