General

  • Target

    d764e835f378ec1fcced430a41d4ad10N.exe

  • Size

    248KB

  • MD5

    d764e835f378ec1fcced430a41d4ad10

  • SHA1

    5528570eacd33cfcd50a4646e8f0d0b312b4d8f9

  • SHA256

    904ca92acb7a06c8b766b88a0989ea18b850acef8942b140c646ac24050b2b92

  • SHA512

    810ecfaba6d4721b87f87b14ae7f190886be57f502b9833feb5673b765ff47f9f3817459868bc86fd6bc82abcca58fb0171c829eabbf5bd0a41140f38a982ef2

  • SSDEEP

    1536:B4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:BIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d764e835f378ec1fcced430a41d4ad10N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections