General

  • Target

    cca1045d550c0f4888314c67345c6de22abe1f58a24694bbde9085b14c186cca

  • Size

    316KB

  • MD5

    a3e8289b01adb7e2afcda7d488f8e492

  • SHA1

    93e31552a12ad0fc580edef9ad17a06373b391ef

  • SHA256

    cca1045d550c0f4888314c67345c6de22abe1f58a24694bbde9085b14c186cca

  • SHA512

    f4f9018644d893893ecd65f0a04375c768ee194fed9f7febc77027ec328b50f8c08493d8a1e689a3d12203471a57488acadf8af4d8166b85a5bb4deb67f28150

  • SSDEEP

    1536:S4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:SIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cca1045d550c0f4888314c67345c6de22abe1f58a24694bbde9085b14c186cca
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections