Resubmissions

03/09/2024, 18:20

240903-wy41fsshmp 10

03/09/2024, 18:16

240903-wwggdathlg 10

General

  • Target

    44145cce562c5ab67f15d94b4bb7d050N.exe

  • Size

    316KB

  • MD5

    44145cce562c5ab67f15d94b4bb7d050

  • SHA1

    67f6252919aca78d7176480c9f7d1b12b6e9aa74

  • SHA256

    628d01a55be555ce0551e8c50b82176a8bbab6571583d462560dc7243586026c

  • SHA512

    cd08ebbd6841392a9f0b5120341997bbb3285cd40bfe21bb280d2b56796d21f188f36c1ce5dc5a009ae76578498f0919b5217481dd31b782fb3bb8fd1883c8aa

  • SSDEEP

    1536:c4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:cIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44145cce562c5ab67f15d94b4bb7d050N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections