General

  • Target

    b9bd0de9562dcc0f7d9c8edd3de771e0N.exe

  • Size

    248KB

  • MD5

    b9bd0de9562dcc0f7d9c8edd3de771e0

  • SHA1

    f0cd6941ad4fd5066c15cedf68a326ddd4ff744b

  • SHA256

    d3809b370b95fab3b51c8d0005d473bf02bf5cc17811f681c47b72cee69e462c

  • SHA512

    c3e48eb36a142b01f86532ea7601a0bed1e6dd6db882f7a754626ff044410b2f3819b45ba74f3cdf37a668e2808b10213e8cba671d6aeab26f679e9ac3b1c0fd

  • SSDEEP

    1536:64d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:6IdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9bd0de9562dcc0f7d9c8edd3de771e0N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections