General

  • Target

    a52d3caf25c72fbbd3b140521c3cb360N.exe

  • Size

    248KB

  • MD5

    a52d3caf25c72fbbd3b140521c3cb360

  • SHA1

    cbf9f4908105563d7c4862872f8c141bcbf75145

  • SHA256

    5bd0b1c2effb034e7c34373d9ff164cd0b33f7040810525d27af5a1b56c79011

  • SHA512

    fa8e54f715b36f8057ab1357a25dc3a583613050517421c97d3caa6814937f418d46dd7df53bb2598f31721d325be391babae6ec047c7cef1ccdf728f2416da9

  • SSDEEP

    1536:z4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZMnOHBRzU:zIdseIO+EZEyFjEOFqTiQmGnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a52d3caf25c72fbbd3b140521c3cb360N.exe
    .exe windows:4 windows x86 arch:x86

    b6ad8e85304192a027658f6e227d5e36


    Headers

    Imports

    Sections