General

  • Target

    3b6e1826945d7a6cb858252f82427960N.exe

  • Size

    316KB

  • MD5

    3b6e1826945d7a6cb858252f82427960

  • SHA1

    28114c3ffab52962ff018674ab7dc0fd55a09cb4

  • SHA256

    692ee5ca268a79f28b5106f71eda80df614052b63444885c9174d39e1bb82c04

  • SHA512

    7e8ea0eee5e779196de5d5cec2c202702e833881a302b333e56bf7f4f4701bc56b51371f870061e1a0ae39f8affc9885ddb58d3d0ef3fce88aebaa7d0f9e63a3

  • SSDEEP

    1536:R4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:RIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3b6e1826945d7a6cb858252f82427960N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections