General

  • Target

    5b86504c04a96fae49b3891372a2f3b0N.exe

  • Size

    316KB

  • MD5

    5b86504c04a96fae49b3891372a2f3b0

  • SHA1

    7f2d877b05ad6639c505dbeb7d97ef635755afba

  • SHA256

    d427e6e2b18d4a9f83067b1d6ef3ab8aeaeff8dab0ce8edf0d645a7bf21a1b56

  • SHA512

    909dae53c25ac691236ea5166e587ce7db136ca84397ac14d3875a34bbeba622109868a4a6585d28c61bda1786adb3ed419bc0351ad755b2cf46dd066d66e4b5

  • SSDEEP

    1536:+4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:+IdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b86504c04a96fae49b3891372a2f3b0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections