General

  • Target

    2af4a3013dc8e3847bab66ddf8027d30N.exe

  • Size

    316KB

  • MD5

    2af4a3013dc8e3847bab66ddf8027d30

  • SHA1

    b4c5bef456672d7791919066b19af5ae59b684ef

  • SHA256

    62cb5172156ebb279b2f49e655dfaf9233a7ae2ad59f5e95f6b53e294e08e4e0

  • SHA512

    643dfaf5229b3323f8098b9f0c19c00c0f38fa3d7a83b0155718917e4d414489082e0f7d8856c5a4ce5133c1c9eb1f95bc726cecea5946c58550785a8ab0500e

  • SSDEEP

    1536:p4d9dseIOc+93bIvYvZEyF4EEOF6N4yS+AQmZUnOHBRzU:pIdseIO+EZEyFjEOFqTiQmKnOHjzU

Score
10/10

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Signatures

  • Neconyd family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2af4a3013dc8e3847bab66ddf8027d30N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections