General

  • Target

    8db242dd274636819d91ecc8d33755a0N.exe

  • Size

    248KB

  • MD5

    8db242dd274636819d91ecc8d33755a0

  • SHA1

    2d64006163a96f1483fb280c556fe3a0eb03603b

  • SHA256

    073f43e0aa6c8d554fb99255d6a4727bebe18b243d6f2b67093bc485b39c7692

  • SHA512

    b768c565ef43eb7a77e15609e1bb4c07215baf9d5c3a7c2ac9c0d6ccac920682f7ae5a0576f320502330dd69a94cc4302897895d779c684b7f187f0620de7234

  • SSDEEP

    1536:a4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:aIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8db242dd274636819d91ecc8d33755a0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections