General

  • Target

    a0edccd75cf5bd2f64534715c359268a61c5d1a814b15abc6e5d48a372ed7d55

  • Size

    316KB

  • MD5

    3ca59aaac9b0f5529dc1f0244740516d

  • SHA1

    b05ca2b346639c475dc1dd8a3b1e7cd517662b12

  • SHA256

    a0edccd75cf5bd2f64534715c359268a61c5d1a814b15abc6e5d48a372ed7d55

  • SHA512

    126df8bccb76a5143e5ca6dc3e9b446408f18673e5c2c1fdd482bc94cd7f5984d24fa858011ab03971646134bca1e10f53bfc1ecd0e698218aa4efb1267e0e0d

  • SSDEEP

    1536:e4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:eIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0edccd75cf5bd2f64534715c359268a61c5d1a814b15abc6e5d48a372ed7d55
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections