General

  • Target

    ee0da928f3ea4b87b68c5d572f31a7d0N.exe

  • Size

    248KB

  • MD5

    ee0da928f3ea4b87b68c5d572f31a7d0

  • SHA1

    e3e7e0f4526872e5d2383fa1da4caff6cf19d920

  • SHA256

    adc7516d4436807ecd92e60e1499c8d582b617289c36ae2e30ff87c031e2b49a

  • SHA512

    478941dcceb6a8101cb569f983fdd34231af97cfc75125c9012e069d1a5379412d21706ac9ba974898710ce3395fb590b2b84af40e1d88cf1db0221cf37a6bf8

  • SSDEEP

    1536:r4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:rIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ee0da928f3ea4b87b68c5d572f31a7d0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections