General

  • Target

    991b3030200760fe2d04b48625049230N.exe

  • Size

    316KB

  • MD5

    991b3030200760fe2d04b48625049230

  • SHA1

    5b2f3065d8ad8e9a00430cf3db4868db826832c8

  • SHA256

    e15bf1ced07b046c02c84b3d0622fcc022b301363e3064675acf0f0dc0d85218

  • SHA512

    f34b75a0de9f07f7c850d26e25d854d896a185478df499d512fd86e9477e8948087c58bb2417ed349d97f1109438325b666ebd2d23ab02c23bda08e838ad0e70

  • SSDEEP

    1536:B4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:BIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 991b3030200760fe2d04b48625049230N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections