General

  • Target

    0edcd4409817f0f4ceb38d53132c4350N.exe

  • Size

    248KB

  • MD5

    0edcd4409817f0f4ceb38d53132c4350

  • SHA1

    ee2bcbff75dbb70c1f0e8cea26fab4aab62c8f1f

  • SHA256

    3eb60512094f71daf03511e9f9202afb6e8b0d5a96d3894e75aa1006501ff944

  • SHA512

    f4061e501f56631845c8c6ba9c2449f7ac169ee2d9654a88f7115cbb5301655f00c5caac321c5d66ab0032b6d73a50d04469f500d43d4ec6e91f730e5dbed143

  • SSDEEP

    1536:w4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:wIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0edcd4409817f0f4ceb38d53132c4350N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections