General

  • Target

    443f4549a883ffa062d9ddea92040980N.exe

  • Size

    118KB

  • MD5

    443f4549a883ffa062d9ddea92040980

  • SHA1

    73572c3ecf7909d403804657d147318ed2a04c80

  • SHA256

    84eb2e13dbd80ac45c5e5954d8072c338f2f817dfb21a1a33d12f104a91f4b04

  • SHA512

    c4a631e66ee18bdde6bc249d4172114a387b1c79098516ecbee958bef9cf6e1f04b2295b89924469aa836ffc5626e356eb0d1964c8ec321adb7dade6e6da7df6

  • SSDEEP

    1536:ud9dseIOcE93bIvYvZEyF4EEOF6N4yS+AQmZinzOGP97Hm11:2dseIOMEZEyFjEOFqTiQmQnzX7Hm11

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 443f4549a883ffa062d9ddea92040980N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections