General

  • Target

    98c3b3d6e2f586fa614c1f411a592db0N.exe

  • Size

    316KB

  • MD5

    98c3b3d6e2f586fa614c1f411a592db0

  • SHA1

    359700005366f4d47d0896a39554d441e2b670c2

  • SHA256

    43e07825a974d5a512e976538a5e5fbc84b37be73e73c3293704b730bbb07c57

  • SHA512

    f6a8210145ee3e1a7ce3e4adba7a3207b9dc883194904ef4d46bb7524a9ee1a4ca4cc84402ae16e89b8e9402a5d9764d10ff9390c293545e523803c7b673c43c

  • SSDEEP

    1536:K4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:KIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 98c3b3d6e2f586fa614c1f411a592db0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections