General

  • Target

    698972651b17bd708585860e03ea3f60N.exe

  • Size

    248KB

  • MD5

    698972651b17bd708585860e03ea3f60

  • SHA1

    e5bff338121b794f1a0c2e844666280b298afdb1

  • SHA256

    fa282edbeaaa6f00b2f527ce3c46e9f0e3237c366fb5dd86540bbb9e425ba62e

  • SHA512

    1c44b945b41734c1f83de482885ff42ccbc22babdec0bcaf37675048a7b1a95d9e368229e64e222d8e32009a8054c8c29c22ab80adc6a7d8633e28358473e497

  • SSDEEP

    1536:74d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:7IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 698972651b17bd708585860e03ea3f60N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections