General

  • Target

    d10b9628ccae218a02aea3c1679b257cf4d1526ecb1c534f2d7f3422721982ac

  • Size

    248KB

  • MD5

    4138a98d7281514d27ab5cfc62fe0ec9

  • SHA1

    303af59184fa664d5621300bf332d46949ed7dcb

  • SHA256

    d10b9628ccae218a02aea3c1679b257cf4d1526ecb1c534f2d7f3422721982ac

  • SHA512

    bfe1c5f9dddd73b2c75d25a99198c76cf6346f9522470da91862e07745b34634ffa619493c7c633b50490e97a3607cbbee8fe48208e6e544867bf1cca12113a5

  • SSDEEP

    1536:Q4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:QIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d10b9628ccae218a02aea3c1679b257cf4d1526ecb1c534f2d7f3422721982ac
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections